failed signature verification causing IdP not to load?

[Cantor, Scott]

On 6/12/15, 11:11 AM, "users on behalf of Rob Gorrell" <users-bounces at shibboleth.net on behalf of rwgorrel at uncg.edu> wrote:
>
>Obviously, there is an entity in the metadata that fails signature validation, but should that stop my IdP from loading? or simply omit that entity but continue on? What would control something like that?

The failFastInitialization property determines that. One view was that any failure to load metadata meant that something was going to fail later and that it should a fatal error rather than silently failing afterward. I disagreed, but we compromised and a setting was added to control it.

-- Scott