Shib SP error : Unknown or Unusable Identity Provider

[Mak, Steven]

Look at the downloaded IdP metadata and check for a 'validUntil' attribute in the EntityDescriptor element, see if it's 14 days from when you download it.

If it's there, you can either manually delete that until you get mdq working, or find an alternate source from the provider.

- Steve

On Sep 23, 2022, at 19:12, Marina Krenz <mvkrenz at ren-isac.net> wrote:


14 days sounds about right.  I could not get shibboleth embedded discovery service to pull the IdP list. I cannot get mdq working, the list is just blank.
So I have downloaded an IdP metadata file and read that file from the file system not remotely.

From: users <users-bounces at shibboleth.net> on behalf of "Mak, Steven via users" <users at shibboleth.net>
Reply-To: Shib Users <users at shibboleth.net>
Date: Friday, September 23, 2022 at 4:48 PM
To: Shib Users <users at shibboleth.net>
Cc: "Mak, Steven" <makst at upenn.edu>
Subject: Re: Shib SP error : Unknown or Unusable Identity Provider

Is the IdP metadata expiring? Are you rebooting about every 14 days?

- Steve


On Sep 23, 2022, at 16:34, Marina Krenz <mvkrenz at ren-isac.net> wrote:


Hi,
I have setup shibboleth SP and it seems that I need to keep rebooting it.
After a specific period of time I get an error
Unknown or Unusable Identity Provider
After rebooting shibd it does away.

Are there any settings I need to make to keep it up?

Thank you
Marina



--
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!RUfgbJF4eYxZeBoV_OkZmkVFlhhoXHQ9i3ibH8dU4wsxN0ACNxf7WSOPrDX1HP_CHNWz1dKO8tbtJ6Rw$
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-- For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!TzfWcDqx-QkNAej2vFOebqZZNhuUlRy9lqlADVE6lzFszrChVrupy49P4P5qqtchaXJ9tJUaK61KXvKs$
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220924/665595e7/attachment.htm>