Multiple entityIDs with the same metadata

Nate Klingenstein ndk at internet2.edu
Thu Jul 23 14:45:24 EDT 2015


> The metadata that I was given to add to the IdP only lists the entityId and endpoints as foo.bucknell.edu.  Can I modify the metadata so that IdP will consider both foo and bar as valid endpoints and I won't receive the error message:
> 
> SAML 2 SSO profile is not configured for relying party https://bar.bucknell.edu/shibboleth

Endpoints, yes.  entityID, no.  Changing an entityID is really fun and exciting, so if you can avoid that, I would.  Basically, add bar.bucknell.edu endpoints alongside the foo.bucknell.edu endpoints to your https://foo.bucknell.edu/shibboleth entityID.

> Any suggestions will be appreciated.

If you want to change the entityID, I would suggest just having two registered entities in metadata and then removing foo once you’re certain it’s no longer receiving traffic.


More information about the users mailing list