SP metadata that supports both sha1 and sha2?

[Tom Scavo]

On Wed, Jun 25, 2014 at 11:22 AM, Liam Hoekenga <liamr at umich.edu> wrote:
> We have a vendor who wants to set their metadata up to support both their
> sha1 and sha2 hashing.
>
> I know that metadata can contain multiple certificates (so you migrate to a
> new one)..
> Can it contain multiple signature algorithms?
>
> It seems like if it did, it would have to be multiple (complete) signature
> elements.

I'm not sure what you're asking, Liam. Is this a question about the
IdP's signing certificate in metadata? If so, the answer is: that
shouldn't matter to an SP who's running compliant software. See this
blog post for details: https://spaces.internet2.edu/x/AYbYAg

Hope this helps,

Tom