(I am also) Using a different SP entity ID with the IdP SAML authn flow

[Cantor, Scott]

On 4/5/22, 11:36 AM, "Janne Lauros" <janne.lauros at csc.fi> wrote:

>     Maybe I was not clear enough. Everything works fine unless I define the said override and define the
> upstream entity id there instead of using Default Relying party (with same values).

Could be an issue with the recipient value the other IdP is including in the encrypted XML, but assuming it's got the intended value, it's possible there's a bug. Maybe the IdP isn't feeding the right entityID into the key resolver. I'd check the XML first.

-- Scott