<div dir="ltr">Is it possible to "override" ACS end point n SP's  InC metadata?<div><div><br></div><div>Here's the reason/background: Zoom configured a test domain for us and added the SP metadata to InCommon. Everything worked. Then they went to migrate us to production and broke it; the production domain is routing the request to our IdP with the test entityID, which might be sort of OK, but the request indicates a return point in the prod domain and that end point isn't in the metadata. They turned off SSO in the test domain, so we're now not able to log in to either the previously successful test instance or the production instance. Alas, this is a very high level high visibility short time-line deployment for us, so I wondered, in the absence of reasonable action from zoom I could "override"or just add the  end point or replace the entire SP metadata with local version based on what the zoom integration site claims to be the metadata for our production domain. [both instances contain the same encryption cert, alas a 2-year cert].</div><div><br></div><div>David Bantz</div></div><div>UA OIT IAM</div><div><br></div><div>Previously working "test" SP metadata in InC aggregate:</div><div><br></div><div>





<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s1" style="color:rgb(33,118,199)"><EntityDescriptor </span><span class="gmail-s2" style="color:rgb(189,54,19)">entityID=</span>"<a href="https://testalaska.zoom.us">https://testalaska.zoom.us</a>"<span class="gmail-s1" style="color:rgb(33,118,199)">></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span style="color:rgb(129,144,144)">...</span></p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(129,144,144)">





</p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><AssertionConsumerService </span><span class="gmail-s3" style="color:rgb(189,54,19)">Binding=</span>"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">Location=</span>"<a href="https://testalaska.zoom.us/saml/SSO">https://testalaska.zoom.us/saml/SSO</a>"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">index=</span>"1"<span class="gmail-s2" style="color:rgb(33,118,199)">/></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;line-height:normal;font-family:Menlo"><span class="gmail-s2" style=""><font color="#000000">Zoom-asserted metadata SP metadata for production:</font></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)">





</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s1" style="color:rgb(33,118,199)"><md:EntityDescriptor </span><span class="gmail-s2" style="color:rgb(115,138,4)">xmlns:md=</span>"urn:oasis:names:tc:SAML:2.0:metadata"<span class="gmail-s1" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">entityID=</span>"<a href="https://testalaska.zoom.us">https://testalaska.zoom.us</a>"<span class="gmail-s1" style="color:rgb(33,118,199)">></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s1" style="color:rgb(33,118,199)">...</span></p><p class="gmail-p1" style="margin:0px;font:10px Menlo;color:rgb(33,118,199)">





</p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><md:AssertionConsumerService </span><span class="gmail-s3" style="color:rgb(189,54,19)">Binding=</span>"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">Location=</span>"<a href="https://alaska.zoom.us/saml/SSO">https://alaska.zoom.us/saml/SSO</a>"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">index=</span>"0"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">isDefault=</span>"true"<span class="gmail-s2" style="color:rgb(33,118,199)">/></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)">






</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><md:AssertionConsumerService </span><span class="gmail-s3" style="color:rgb(189,54,19)">Binding=</span>"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">Location=</span>"<a href="https://alaska.zoom.us/saml/SSO">https://alaska.zoom.us/saml/SSO</a>"<span class="gmail-s2" style="color:rgb(33,118,199)"> </span><span class="gmail-s3" style="color:rgb(189,54,19)">index=</span>"1"<span class="gmail-s2" style="color:rgb(33,118,199)">/></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><span class="gmail-s2" style="color:rgb(33,118,199)"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:10px;line-height:normal;font-family:Menlo;color:rgb(165,119,5)"><br></p></div></div>