Regenerate IdP key

Tom Scavo trscavo at gmail.com
Mon Oct 17 08:08:21 EDT 2016


On Mon, Oct 17, 2016 at 7:24 AM, Dave Perry
<Dave.Perry at hull-college.ac.uk> wrote:
>
> I’m probably having a woolly-headed moment, but I can’t figure out how to do
> this (we cloned the production IdP to a test one, partly so we can try and
> fix the google setup away from the live one – so I need it to have a new
> ones on its different hostname).

Assuming both systems are deployed on the same (secure)
infrastructure, why not use the same key on both? In fact, make them
the same in all respects. At any given time, one is production and one
is pre-production. You configure a change on the pre-prod system,
test, and then move it to production by a DNS change.

Tom


More information about the users mailing list