<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 9pt; color: rgb(0, 0, 0);">
I apologize -- i meant the vendor's own signing certificate for signed authentication requests.
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 9pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 9pt; color: rgb(0, 0, 0);">
We don't yet know what the IDP certificate update cost might be at the vendor side.. I'm going to find out.
<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Friday, October 2, 2020 11:40 AM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: [External] Re: Recommended or "Best" Practices for Shibboleth IdP?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On 10/2/20, 11:03 AM, "users on behalf of Shweta Kautia" <users-bounces@shibboleth.net on behalf of skautia@northcarolina.edu> wrote:<br>
<br>
> And I'll just add to that scenario.. we are currently dealing with a vendor that is charging $ to add a signing certificate<br>
> for existing SSO implementations.<br>
<br>
I really don't understand what that means. If they're charging you because you wanted them to start allowing for a second signing key from your IdP, then that's nuts, but ultimately scuzzy vendors gonna scuz.<br>
<br>
Most vendors can't actually even handle a second signing key so any key change requires a scheduled switch.<br>
<br>
But during my key change I certainly never encountered a single vendor wanting to charge for the change.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>