<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 3 March 2017 at 16:43, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="m_5091639165232469602m_-7034252209707909728gmail-">On 3/3/17, 10:39 AM, "users on behalf of Jozef Misutka" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:misutka@ufal.mff.cuni.cz" target="_blank">misutka@ufal.mff.cuni.cz</a>> wrote:<br>
<br>
> Thank you all for the answers. Because I still do not have the answers, I will try to rephrase<br>
><br>
> IdP consumed this metadata:<br>
<br>
</span>Don't try and use key names. Just don't.<br>
<br>
> 1. Will it work?<br>
<br>
Yes, generally, and if not you probably borked it by using key names.<br></blockquote><div><br></div><div>If Shibboleth IdP/SP software cannot handle key names (and there indeed is documentation showing the usage of keynames [1,2]) then it is really not us who broke it!</div><div>The same applies for federations that are using keynames.</div><div><br></div><div>[1] <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPCredentialResolver" target="_blank">https://wiki.shibboleth.ne<wbr>t/confluence/display/SHIB2/Nat<wbr>iveSPCredentialResolver</a><br></div><div>[2] <a href="https://www.switch.ch/aai/guides/sp/certificate-rollover/" target="_blank">https://www.switch.ch/aai/<wbr>guides/sp/certificate-rollover<wbr>/</a></div><div> </div><div>Jozef</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<span class="m_5091639165232469602m_-7034252209707909728gmail-"><br>
> 2. What if Active/Standby are vice versa at one of them?<br>
<br>
</span>Doesn't matter. Generally.<br></blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="m_5091639165232469602m_-7034252209707909728gmail-HOEnZb"><div class="m_5091639165232469602m_-7034252209707909728gmail-h5"><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.n<wbr>et</a><br>
</div></div></blockquote></div><br></div></div>