changing the dns name of the IDP

[Klingenstein, Nate]

The only one that contains a name that matters is the backchannel one, so if you don't need the back channel, you probably don't need to worry about it.

Aren't there a number of products that can do PKIX validation of certificates, including Shibboleth?  I appreciate that it's not the preferred form of trust, but it seems like the other names could still matter in any number of conceivable integrations.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160711/6b6388d6/attachment.html>