<!DOCTYPE HTML><html>
<head>
<meta name="Generator" content="Amazon WorkMail v3.0-4275">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>RE: Error using Testshib as IdP - SPSSODescriptor role metadata for entityID [REDACTED] could not be resolved</title>
</head>
<body>
<p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">I agree with virtually Kevin said, but I wouldn't personally find a sanity check against SAMLtest every week or so to be a bad thing or too much load, and now that metadata should be persistent, it might be something we could consider. That said, Kevin's point about an internal IdP is spot on.</p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;"> </p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">We did have a deployer who had a health check that polled TestShib every 2 seconds for awhile. They were very gracious in stopping and repenting.</p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;"> </p><blockquote style="border-left:2px solid #b0b0b7; margin-left:5px; margin-right:0px; padding-left:5px">-----Original message-----<br /><strong>From:</strong> Kevin Foote<br /><strong>Sent:</strong> Monday, October 22 2018, 10:55 am<br /><strong>To:</strong> Shib Users<br /><strong>Subject:</strong> Re: Error using Testshib as IdP - SPSSODescriptor role metadata for entityID [REDACTED] could not be resolved<br /> <pre style="white-space:pre-wrap; word-wrap:break-word">Hi Matthew,
> On Oct 22, 2018, at 10:43 AM, Matthew Ray <<a href="mailto:Matthew.Ray@infor.com">Matthew.Ray@infor.com</a>> wrote:
>
> We have a number of test environments that use Testshib for an IdP as a kind of sanity check, just to make sure that our SSO functionality isn't completely broken.
For starters your not supposed to do that .. It (testshib) was never designed for that type of use. Using something out of your control for a health-check is a bad idea regardless of the external design.
> Could anyone explain what is happening?
Next .. we have kind of abandoned that [1] service.
Use the next generation configuration for a simple one time check (NOT a health-check).
[1] <a href="https://marc.info/?l=shibboleth-users&m=153856905122908&w=2">https://marc.info/?l=shibboleth-users&m=153856905122908&w=2</a>
--------
thanks
kevin.foote
--
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">https://wiki.shibboleth.net/confluence/x/coFAAg</a>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre></blockquote>
</body>
</html>