changing the dns name of the IDP

[Cantor, Scott]

> What's the quickest way instead of re-generating all the certs. signing,
> encryption, backchannel to change the IdP's DNS name?

The only one that contains a name that matters is the backchannel one, so if you don't need the back channel, you probably don't need to worry about it. But uou can use any tools you want to generate keys and certificates, you shouldn't rely on the IdP to do it for you. It's essential to be fully comfortable dealing with them with whatever tools you prefer to use (e.g. OpenSSL).

-- Scott