Sharing SP Metadata amongst multiple SPs

[Cantor, Scott]

On 11/7/15, 2:07 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:



>On 11/7/15, 2:00 PM, "users on behalf of Phil Lello" <users-bounces at shibboleth.net on behalf of phil at dunlop-lello.uk> wrote:
>
>>Perhaps I should have specified I'm talking about the AssertionConsumerService in the AuthnRequest from the SP, and whether or not the Shibboleth IdP will respect use value in the request if it isn't present in the metadata the IdP holds for a given SP.
>
>Not unless the request is signed and the IdP is configured to skip validating the endpoint.

I neglected to note the setting, it's a profile config setting, skipEndpointValidationWhenSigned.

-- Scott