Multiple saml cert for same SP

Tom Scavo trscavo at gmail.com
Thu Sep 7 09:49:12 EDT 2017


On Thu, Sep 7, 2017 at 9:40 AM, Alan Buxey <alan.buxey at myunidays.com> wrote:
>
> if you've got a day left then things are going to break. just replace
> the cert in metadata and service and take the hit . :/

Not necessarily. In its usual configuration, Shibboleth doesn't care
if a certificate in metadata is expired. So if all your partners are
running Shibboleth, there will be no outage. I'm guessing the same is
true of simpleSAMLphp. All other implementations are suspect.

Tom


More information about the users mailing list