Multiple saml cert for same SP

[Peter Schober]

* Zico <mailzico at gmail.com> [2017-09-07 13:26]:
> If any SP has two SAML certificates in it's metadata, can Shib IdP support
> that?

Yes.

> What I am asking is more like how Incommon handles cert
> migration.... keep existing soon-to-be-expired cert in
> metadata... add new metadata.... so there are two metadata
> available. When old cert is expired; there is no outage as new cert
> is already being used there.

Yes. Check the extensive InCommon documentation on key rollover if
you're an InCommon participant.

-peter