Error resolving principal name

[Rod Widdowson]

> I believe I have worked out the cause of the invalid transientId and I
> think it's down to the way I setup high-availability on our Shibboleth
> IdPs.

That would explain it.

> For the time being I've disabled the secondary server and the
> associated reverse proxy 8443 rules, and all seems to be ok. I'll look
> resilience further from here.

The wiki has some good documentation.  It sounds like you need the
CryptoTransient stuff.

R