multiple key descriptors in sp-metadata

[Jeremy Shapiro]

When the sp-medata.xml provides multiple keydescriptors how does the IdP
select which one to use for encrypting the SAML assertion?  Is it first,
last, X509 attribute based, random, etc?  I assume the real answer here is
that it shouldn't matter to the SP and it should be prepared for any key to
be used.  But I'm interested in what the behavior is, and whether there's a
difference between IdP v3.0 and v4.0.

  Thanks,
  Jeremy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210325/8b3f82ef/attachment.htm>