Shib IdP v3: Which certificate do you upload to InCommon?

[Cantor, Scott]

> I agree but I didn't see any way to upload the metadata directly. That would
> have been my preference. If I missed something, please let me know.

Tom's point is that giving people the ability to upload metadata tends to result in them grabbing whatever file they have, not understanding what's in it, and blindly supplying it.

> I do understand what the three certs are for, but I didn't know which one to
> choose in this case, where it seemed you could only upload one.

InCommon supports any number of keys, but only for signing and TLS, not encryption. You can't distinguish between signng and TLS because they're both the same in SAML terms.

-- Scott