<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 8/10/15 8:42 PM, IAM David Bantz
wrote:<br>
</div>
<blockquote
cite="mid:CAJ9XvwEtq2BZWKLq6tO4kMOLSc_Bkyvan2fKh5RAhxfNTWmJ6w@mail.gmail.com"
type="cite">
<div dir="ltr">I'm attempting to configure a Salesforce
application with our Shibboleth IdP. The Salesforce SAML
configuration page requires piecemeal input of the elements of
the IdP metadata. Most of the requested data is accepted, but
the form rejects our institutional EntityID as "invalid"
apparently because it is in urn:mace:incommon... format rather
than a URL.</div>
</blockquote>
<br>
Well, if they require that, they're just wrong. Period. A SAML
entityID is a URI, it is not required to be a URL subtype.<br>
<br>
<blockquote
cite="mid:CAJ9XvwEtq2BZWKLq6tO4kMOLSc_Bkyvan2fKh5RAhxfNTWmJ6w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>If not, any suggestions to try?</div>
<br>
</div>
</blockquote>
<br>
Other than the obvious - telling them that their software is broken
and making them fix it - I believe both v2 and v3 IdP's can be
configured to respond under a different entityID for particular
relying parties. <br>
<br>
In the v2 custom schema, it's here [1], the 'provider' attribute on
a RelyingParty element.<br>
<br>
In v3, I believe it's 'responderId' on a RelyingPartyConfiguration
bean [2]. Don't know if we have an example in the wiki somewhere, a
wiki search for 'responderId' doesn't turn up anything for me.<br>
<br>
<br>
[1]
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPRelyingParty">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPRelyingParty</a><br>
[2]
<a class="moz-txt-link-freetext" href="https://build.shibboleth.net/jenkins/job/java-identity-provider-nightly/javadoc/net/shibboleth/idp/relyingparty/RelyingPartyConfiguration.html">https://build.shibboleth.net/jenkins/job/java-identity-provider-nightly/javadoc/net/shibboleth/idp/relyingparty/RelyingPartyConfiguration.html</a><br>
</body>
</html>