SessionInitiator handler at duplicate Location (/Login) will not be processed for application (default) - default IDP function not working since SP upgrade from v2 to v3

[Cantor, Scott]

On 3/12/19, 11:18 AM, "users on behalf of Joel Saunders" <users-bounces at shibboleth.net on behalf of Joel.Saunders at zones.com> wrote:

> I'm wondering if this is a check in the new version.

The warning is, the behavior isn't.

> Should I remove the SessionInitiator section and change the  SSO section to use the entitiyID option with my IDP vs. the
> discoveryURL since I still need the one IDP to default to?

A discoveryURL is never used if you're pointing it at an IdP to use, it never gets a chance to see it. And you do not have what would be needed in there to just pull the SSO element, that takes much more XML than you have there, all the AssertionConsumerService handlers and so forth. So you have no real choice, you need to get rid of the SessionInitiators.

-- Scott