Multiple Certificate Scenario

[Ian Young]

On 28 Aug 2014, at 12:53, Tom Scavo <trscavo at gmail.com> wrote:

> On Wed, Aug 27, 2014 at 8:49 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>> 
>> There aren't any widely deployed/supported ways right now of associating
>> an entity with something like a federation that is future proof
> 
> I thought we were going to rely on the <mdrpi:RegistrationInfo>
> extension element attached to each entity descriptor? The value of the
> registrationAuthority XML attribute is a persistent identifier for the
> federation, is it not?

The spec intentionally steers clear of talking about federations and instead talks about registrars. At the moment there's a one-to-one mapping in most cases between federations and registrars, but that isn't necessarily always going to be the case.

Whether you can use registrationAuthority as a proxy for "a federation" depends on the particular property of "a federation" that you want to distinguish, and what purpose you want to put the information to.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5943 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20140828/56902179/attachment-0001.bin