Validating federation metadata

[Peter Schober]

Cooper, Robert A via users <users at shibboleth.net> [2024-06-07 17:57 CEST]:
> The specific error I'm seeing is "EntityDescriptor '<redacted>'
> failed signature verification, removing from metadata provider", and
> it's on multiple EntraID entities.

Not sure what end you are seeing this on (Shibboleth SP? IDP?) but
that probably means that the other side has changed signing keys and
didn't tell you about it.  So yes, updating the metadata your system
has describing the other side will likely take care of this.

> I see a lot of docs about metadata in shibboleth but haven't really
> found anything specific to the federation config.  Can someone point
> in in the right direction?

Metadata is "federation config", really.
If you were to ask a specific question the answers might also be more
useful to you. Maybe also check out the conceptual material from the wiki:
https://shibboleth.atlassian.net/wiki/spaces/CONCEPT/

Best,
-peter