Shib 3.x & alternate credentials

[Cantor, Scott]

On 10/28/15, 11:12 AM, "users on behalf of Dave Bartholomew" <users-bounces at shibboleth.net on behalf of Dave.Bartholomew at csueastbay.edu> wrote:



>>I ran with relying-party.xml as follows:

I was suggesting you leave the DefaultRelyingParty bean alone, but leave the override bean empty of any profiles. That way if it runs, you know it's using the default RP and if it fails with the unsupported profile error, you know it's using the override. Quick way to tell without guessing from logs. But same diff.

>It seems it's not matching the SP when in an override.

Yes. I'm not aware of any problem using a single RP entityID in the relyingPartyIds argument, but since that parameter is technically a collection, I guess you should try using the correct syntax of #{{'rpname'}} and see if that changes it.

Otherwise, you have a typo or an extra character somwhere. The entityIDs just don't match.

>Let me know if you still think "defining a separate String bean for the
>entityID" might still prove informative (that wasn't clear to me).

No.

-- Scott