SP v4 alpha2 and discoveryURL ?

[Scott Cantor]

> In my test (even without applications) (and no relyingparty overrides)
> and discovery redirect entityID is sp.issuer and not p:issuer. (I'll try to do some
> logging/debugging to see why sp.issuer gets used).

I should only need help if I can't repdroduce it later.

> Overriding p:issuer for application seems to work with this (no need
> for custom.IssuerStrategy):
>      <property name="applications">
>        <set>
>          <bean parent="shibboleth.sp.Application" p:id="default" />

Don't do that. I'll add code to block that, the "default" is built-in.

>          <bean p:id="dstest1.uef.fi"
> parent="shibboleth.sp.Application.NoInheritance"
>            p:issuer="https://dstest1.uef.fi/sp" />

You shouldn't need the no-inheritance variant, I was referring to the fact that if you want to set something back to null explicitly that isn't null in the Agent, you'd need it for that. But of course, yes, setting issuer explicitly in an Application bean should "work", just isn't something I'm seeing as required in my testing.

> (but for discovery redirect entityid seems to come from sp.issuer, but
> without discovery (with p:authenticatingAuthority) uses application
> p:issuer)

I'm not seeing a difference in what the code does there, but it must exist and should be reproducible.

I also should have a fix for my concerns about defining RelyingParty overrides being awkward but that's a bigger code change coming later.

-- Scott