[EXTERNAL] Multiple entity-id:s for SP-half of IdP?

[Tomas Stenlund]

Thanks Scott,

quick responses as always. Any way of working around it that comes to mind?

If no, I guess I just need to really verify that I have configured 
everything correct and open up a bug. Two proxies might then be the only 
route in short time for me to handle that case.

Cheers,

Tomas

On 2024-04-03 15:58, Cantor, Scott via users wrote:
>> if I'm being daft, but I am running 5.1.1 so what did you mean by
>> that?
> I assumed you were running 4.x, which had a bug making it impossible to "match up" the identity of the proxy with the Recipient value in the XML coming in. That prevents the decryption logic from finding "its" encrypted key in the document to proceed with.
>
> No reason I know of it wouldn't work in a new version, we should be handling that step now. It could still be broken I suppose.
>
> I verified in Jira, it was patched in 5.0.
>
> https://shibboleth.atlassian.net/issues/OSJ-362
>
> I had thought one of the original reports had verified the fix worked, but I don't really know for sure.
>
> -- Scott
>
>
>
>
>
>