Shib IdP v3: Which certificate do you upload to InCommon?

[Karla Borecky]

Hi Nate,

Yeah, I have all the certs in the metadata of course. I don't even know
what they use it for (obviously) so...

Thank you - I know this isn't orthodox, but I'm not the only one involved
in these decision-making processes...

best,
Karla

On Mon, Mar 14, 2016 at 3:07 PM, Nate Klingenstein <
nate.klingenstein at utah.edu> wrote:

> Karla,
>
> The short answer is, the signing certificate.
>
> The long answer is that it’s up to the metadata.  Metadata for providers
> can contain keys for signing, encryption, or both, which is the default.
> There’s almost nothing that the IdP needs to receive encrypted, though.  I
> can’t think of anything out of the box.  So, your metadata should match
> your deployment, and in a default deployment it’s mostly used to validate
> your signatures.
>
> Take care,
> Nate.
>
> On Mar 14, 2016, at 12:59, Karla Borecky <kborecky at smith.edu> wrote:
>
> (Not encryption, I know that now.) What would someone do if their v3 IdP
> were a new addition to InCommon?
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Karla Borecky
Systems Administrator
ITS
Smith College
Northampton, MA 01063
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160314/5d455ad6/attachment.html>