Credentials between SP and Idp

[Cantor, Scott]

> to be more clear , we have an external organization which use them IDP , and
> they want that the communication will be encrypted by a CA certificate.

That is less clear, not more.

> i know that the SP-metadata can be filtered by a certificate , but we need the
> them IDP will not communicate with any other SP , just if we have them CA
> certificate .

I cannot parse that.

> so what i can add in my SP configuration especially in shibboleth2.xml in order
> to accept only a certified connexion .

That doesn't make any sense. What connection? If you're the SP, then the IdP doesn't control your trust model.

An IdP and SP rarely "connect" at all, they send messages through the client. So I don't know what you're trying to limit, or why, or whether it makes any sense to even try.

-- Scott