Transitioning from an old to new IdP instance

coupons at sccoast.net coupons at sccoast.net
Wed May 14 12:15:37 UTC 2025


What I actually did was a fresh install of Shib 5.x on our dev server 
got it running good and working with all SP's, no errors.

Next I copied all the files from dev server over to our new prod server 
and updated all 'conf' files, replacing dev settings with prod settings.

Finally I was going to copy over the 'credentials' - signing/encryption 
certs/keys from our old Shib 3.x to the new Shib 5.x and hoping that 
would be good to go.

Basically everything is new except for existing SP metadata files and 
sign/encrypt credentials. These steps seem like they would work ok.

- Dave

On 5/14/25 7:54 AM, Cantor, Scott via users wrote:
> As David said, you copy everything, not just the keys, then upgrade the new server, and that will work fine (assuming you're cutting DNS over to just point the same endpoints at the new server).
>
> -- Scott
>
>


More information about the users mailing list