Shib 3.x & alternate credentials

[Cantor, Scott]

On 10/28/15, 12:36 PM, "users on behalf of Dave Bartholomew" <users-bounces at shibboleth.net on behalf of Dave.Bartholomew at csueastbay.edu> wrote:



>> try using the correct syntax...
>
>Same problem.

I expected that. There really is no explanation but that the entityIDs don't match.

>While troubleshooting this, I've left the encryption key pair at the
>installation default, so there's a metadata mismatch (although it's not
>"used"). Do you suppose there may be a check that *both* key pairs are OK
>when the SP is within an override but not so when it's hit as the default?

The IdP doesn't know anything about its own metadata, and the matching of a RP by name has nothing to do with metadata in any way, it's a simple string compare against the issuer of the request.

-- Scott