Shib 3.x & alternate credentials

[Dave Bartholomew]

> I guess I would strip out the config down to the bare minimum

I ran with relying-party.xml as follows:

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
       xmlns:context="http://www.springframework.org/schema/context"
       xmlns:util="http://www.springframework.org/schema/util"
       xmlns:p="http://www.springframework.org/schema/p"
       xmlns:c="http://www.springframework.org/schema/c"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans.xsd
                           http://www.springframework.org/schema/context
http://www.springframework.org/schema/context/spring-context.xsd
                           http://www.springframework.org/schema/util
http://www.springframework.org/schema/util/spring-util.xsd"

       default-init-method="initialize"
       default-destroy-method="destroy">

	<bean id="ProductionSecurityConfig"
parent="shibboleth.DefaultSecurityConfiguration">
        <property name="signatureSigningConfiguration">
            <bean parent="shibboleth.SigningConfiguration.SHA256"
p:signingCredentials-ref="ProductionSigningCredential" />
        </property>
    </bean>

    <bean id="shibboleth.UnverifiedRelyingParty" parent="RelyingParty">
        <property name="profileConfigurations">
            <list>
            </list>
        </property>
    </bean>

	<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
        <property name="profileConfigurations">
            <list>
            </list>
        </property>
    </bean>
	
    <util:list id="shibboleth.RelyingPartyOverrides">

        <bean parent="RelyingPartyByName" c:relyingPartyIds=" <SP
entityID>" p:responderId=" <production entityID>" >
            <property name="profileConfigurations">
                <list>
                </list>
            </property>
        </bean>
      		
    </util:list>

</beans>

I got the following error message:

Web Login Service - Unsupported Request
The application you have accessed is not registered for use with this
service.

>From idp-process.log:

2015-10-28 07:55:24,144 - DEBUG
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] -
Profile Action SelectRelyingPartyConfiguration: Found relying party
configuration shibboleth.DefaultRelyingParty for request

2015-10-28 07:55:24,144 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154] -
No SAMLBindingContext or binding URI available, error must be handled
locally

It seems it's not matching the SP when in an override.
Let me know if you still think "defining a separate String bean for the
entityID" might still prove informative (that wasn't clear to me).

--Dave