Unknown or Unusable Identity Provider for Shib 3.2 SP

Cantor, Scott cantor.2 at osu.edu
Tue Jun 4 22:52:53 UTC 2024


> How would we make sure of this?

You don't, the person running the SP does. Were it not for the fact that you clearly broke it by changing your entityID on them, I would have said it's not your job to debug an SP you're not running, and you are not the person who should be here asking, they should be. And I would still say that, really.

However, you did break it, and you fix it first and foremost by reverting that change. If you want to change your entityID, then you talk to every single SP you care about to tell them and you get them to pull in new metadata alongside the old before you just flip it.

> Since the error is thrown prior to any authentication request,

The SP cannot issue a request to an IdP it has no metadata for. It fails immediately, as it is in fact doing.

-- Scott




More information about the users mailing list