Concerns on installing IdP and SP on the same host

[Cantor, Scott]

> For the limit budget for CA-certs, I plan to install IdP and SP on the same host,
> so that the CA-cert can be shared.

Where are you getting certs that the cost is more than buying a sandwich? You probably should look for a cheaper CA.

> I wonder whether there is any concern on this deploy strategy?

For a large number of people it proves to be confusing and hard to understand and leads to a lot of questions that are best answered by "stop doing that".

-- Scott