Adding first IDP to Service Provider error

Peter Schober peter.schober at univie.ac.at
Mon Jul 27 04:14:05 EDT 2015


* Remi Mayrand-Provencher <remi.mayrand-provencher at inLibro.com> [2015-07-24 17:00]:
> <MetadataProvider type="XML" uri="*https://test-idp-remi/idp/shibboleth*"

Don't do that. Instead provide the SP with a local copy of the IDP's
metadata (and vice versa) and reference that in a
MetadataProvider/@file.
That should also take care of your errors (wrt DNS entries, TLS cert
CN vs. host name, packet filters, etc.) from the other message when
trying to dynamically load SAML Metadata from the IDP directly.
-peter


More information about the users mailing list