Multiple entityIDs with the same metadata

Cantor, Scott cantor.2 at osu.edu
Thu Jul 23 15:23:35 EDT 2015


On 7/23/15, 3:20 PM, "users on behalf of Michael Dahlberg" <users-bounces at shibboleth.net on behalf of olgamirth at gmail.com> wrote:

>Ok, I think that's what I tried.  By replicating the AssertionConsumerService binding tags in the metadata for foo, I thought I was adding the endpoint bar to the metadata.  It didn't work; same error.

Because that SP is calling itself https://foo.whatever/shibboleth, that's its name. EntityIDs are not locations.

The error is about missing metadata for a given entityID, not about endpoints.

>I then tried adding the tag skipEndpointValidationWhenSigned="true" to the profile configuration for the IdP of the relying-party file.  This also did not change the error message or the result.

No, because you're impacting service to the entityID it's not using, not the one it is.

If the SP insists on calling itelf by a given name, that's what you need metadata for.

-- Scott



More information about the users mailing list