ArcGIS metadata - no certificate

[Scott Koranda]

> Hi all,
> 
> Quick question: I read the very helpful discussions in a 2015 email about
> configuring this thing with IdP v3 (and yes, they still expect "givenname" to
> have the full name in it O_o. But I have a more basic problem: the metadata
> generated by their SP config page (given to me by the staff person who set it
> up) has no certificate.
> 
> So, is that user error on his part? Or did you all get it working without an SP
> certificate? I thought having no certificate was kind of a deal breaker, though
> I guess you could say 'don't sign anything'?

The SP certificate is not used to sign the assertion sent by your IdP.
Your IdP signing certificate is used for that.

The SP certificate would be used for encrypting the assertion sent by
your IdP. If you do not have an SP certificate than your IdP cannot and
is not encrypting any assertion it sends to that SP. 

The SP certificate would also be used to check a signed authentication
request from the SP if it sent one. It probably is not and it is
unlikely your IdP would require it.

Provided you accept the risk to send an un-encrypted assertion to the SP
you most likely do not need the SP certificate.

Scott K