IdP Certificate Validity checking

Mark Cairney Mark.Cairney at
Thu Dec 3 12:17:17 UTC 2020


Quick question- we've got a new SP which has a relatively short-lived
(13 months) certificate in use for signing/encryption.

Does the IdP do any validity checking of certificates or does it simply
ignore the expiry data?

This is on Shibboleth 4.0.1

Kind regards,



Mark Cairney
ITI Enterprise Services
Information Services
University of Edinburgh

Tel: 0131 650 6565
Email: Mark.Cairney at
PGP: 0x435A9621


The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.

More information about the users mailing list