<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">武井,<br>
<br>
I think you understand the reasons why multiple signing credentials are bad: the exact situation that you're in right now. Scott was just trying to warn you to prevent you from ending up in that situation.<br>
<br>
Since you're already in that bad situation, let's help you out of it. You'll need to do 3 major things:<br>
<br>
1) Create special signing credentials bean in credentials.xml<br>
2) Define a special Security Configuration that points to that bean<br>
3) Refer to that Security Configuration from a RelyingPartyByName Override<br>
<br>
See particularly per-profile Credential in Signing and Encryption Configuration here:<br>
<br>
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration</a><br>
<br>
Obviously, in the future, you'll want to consolidate your keypair and other credential usage to the extent possible.<br>
<br>
よろしくおねがいします,<br>
Nate.<br>
<br>
On 01/16/2017 02:49 AM, 武井宜行 wrote:<br>
</div>
<blockquote cite="mid:CAJcv_JDEwTG9AEK6FGBxfWWB_ZtwMDzzdB-E2z3=0qTMiYnrdA@mail.gmail.com" type="cite">
<div dir="ltr">Hi
<div><br>
</div>
<div>I appreciate your reply.</div>
<div><br>
</div>
<div>In this case,I must migrate Shibboleth idp V2 to V3.</div>
<div>(Currently Shibboleth idp v2 is in use)</div>
<div><br>
</div>
<div>Because multiple signing credential is</div>
<div>now in use in Shibboleth idp v2,I must migrate this settings</div>
<div>to v3.</div>
<div><br>
</div>
<div>If multiple signing credential is not migrated to v3,</div>
<div>the impact is large because changeing the </div>
<div>metadata of some SPs is needed.</div>
<div><br>
</div>
<div>Could you tell me the way how I Use different</div>
<div>SigningCredential per Service Provider?</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2017-01-11 1:34 GMT+09:00 Cantor, Scott <span dir="ltr">
<<a moz-do-not-send="true" href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class="">On 1/10/17, 11:20 AM, "users on behalf of 武井宜行" <<a moz-do-not-send="true" href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of
<a moz-do-not-send="true" href="mailto:ntakei@sios.com">ntakei@sios.com</a>> wrote:<br>
<br>
> I coud not find the solution in Shibboleth Wiki.<br>
<br>
</span>It's in the SecurityConfiguration topic. It is fairly complex to wire up, and this is something you should strongly reconsider doing in most cases, it's not a good idea. It usually reflects a lack of understanding by somebody somewhere. It's critically
important to push back on requirements dictated by people who don't know what they're doing or why.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a moz-do-not-send="true" href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.<wbr>net</a></font></span></blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥<br>
サイオステクノロジー株式会社<br>
技術部<br>
クラウドソリューショングループ<br>
武井 宜行<br>
〒106-0047 東京都港区南麻布二丁目 12 番 3 号 サイオスビル<br>
TEL：03-6401-5314 (直通) 03-6401-5117 (部代表)<br>
URL：<a moz-do-not-send="true" href="http://www.sios.com/" target="_blank">http://www.sios.com/</a><br>
<br>
■SIOSの最新情報はこちらから！「いいね！」をお待ちしています■<br>
(SIOS Technology)：<a moz-do-not-send="true" href="http://www.facebook.com/SIOSTechnology" target="_blank">http://www.facebook.com/SIOSTechnology</a><br>
(OSSよろず相談室)：<a moz-do-not-send="true" href="http://www.facebook.com/OSSyorozu" target="_blank">http://www.facebook.com/OSSyorozu</a><br>
<br>
■Twitter公式アカウント■<br>
<a moz-do-not-send="true" href="https://twitter.com/#%21/SIOS_Technology" target="_blank">https://twitter.com/#!/SIOS_Technology</a><br>
・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥</div>
</div>
</div>
</div>
</div>
</blockquote>
<p><br>
</p>
</body>
</html>