SP certificate rollover

[Cantor, Scott]

On 3/3/17, 7:43 AM, "users on behalf of Ondřej Košarko" <users-bounces at shibboleth.net on behalf of kosarko at ufal.mff.cuni.cz> wrote:

> What role does the order of certificates in the Chaining resolver play?

Ordered list, selection based on compatibility with the algorithm selected.

> How do multiple certs work on the idp side?

Any encryption key in metadata may be used by any IdP, period.

-- Scott