<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Pedro,
<div class=""><br class="">
<div class="">
<div>
<blockquote type="cite" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Identity
Provider Issuer which must match the issuer </span><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">field</span></blockquote>
<blockquote type="cite" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">in
any SAML assertions. Not to sure what this means. Is it</span></blockquote>
<blockquote type="cite" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">just
the </span><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">URL
to my IDP?</span></blockquote>
<br class="">
</div>
</div>
</div>
<div>They're looking for the entityID of your IdP. You'll find that at the top of idp.properties.</div>
<div><br class="">
</div>
<div>There isn't just one URL for your IdP. The most important URL's are your metadata location("here's information about how to talk to this IdP") and your entityID("this is this IdP's primary name"), neither of which has to be a URL, and they don't have
to be related in any way.</div>
<div><br class="">
</div>
<div>InCommon is a very good example: your metadata is hosted at InCommon, but your entityID probably isn't in their namespace, and many older IdP's have URN's for entityID's, which aren't practically resolvable.</div>
<div><br class="">
</div>
<div>If I could change one thing in the world, "IdP URL" would mean "entityID" and metadata would be hosted there. Modern versions of Shibboleth by convention host metadata at /idp/shibboleth, but it's far from consistent, which makes it far from usable in
existing large-scale use.</div>
<div><br class="">
</div>
<div>I'm pushing for more consistency here, but it's one of the most painful things in SAML to change. It gets one step harder for you to change it every time you share it like this.</div>
<div><br class="">
</div>
<div>Take care,</div>
<div>Nate.</div>
</body>
</html>