Signing of assertions

[Cantor, Scott]

> Both AuthRequests are SP-initiated.

Then I don't really know what it's doing, but it's not the IdP's fault.

> But at the moment I don't understand
> why I have to use two different entityIDs

I said you are or may be, not that you have to.  You should not.

> With IdP V2.x this was no problem...

That is simply untrue, the misconfiguration was worked around, by you, or by somebody else, and since you decided to start from scratch instead of upgrading, the configuration is now not correct.

I can only tell you that what you have described is impossible, so therefore the issue is one of your assumptions or claims.

-- Scott