Re: RSA SAML Interop Conference Call Minutes - January 26, 2005

[Greg Whitehead <grw@trustgenix.com>]

Seems to me that we should have one certificate per "entity", as  
identified by an entity id. So, if your SP and IDP are in one server  
and have the same entity id, then they should have the same cert. If,  
however, you plan to install separate servers for your SP and IDP, each  
with their own entity id, then they should have their own certificates.

-Greg

On Jan 28, 2005, at 4:05 PM, Xuesi Dong wrote:

>
> Having only one saves time and has no harm.
>
> - adam
>
> Thomas Wisniewski wrote:
>> No, I meant one (sp and idp share the same one).
>>
>> Tom.
>>
>>     -----Original Message-----
>>     *From:* Ciochon, Robert [mailto:Robert.Ciochon@ca.com]
>>     *Sent:* Friday, January 28, 2005 4:10 PM
>>     *To:* Thomas Wisniewski; samldemotech
>>     *Subject:* RE: RSA SAML Interop Conference Call Minutes - January
>>     26, 2005
>>
>>     I assumed so, one for the SP and one for the idP.  Any other  
>> opinions?
>>     Bob
>>
>>      
>> ---------------------------------------------------------------------- 
>> --
>>     *From:* Thomas Wisniewski [mailto:Thomas.Wisniewski@entrust.com]
>>     *Sent:* Friday, January 28, 2005 12:31 PM
>>     *To:* samldemotech
>>     *Subject:* RE: RSA SAML Interop Conference Call Minutes - January
>>     26, 2005
>>
>>     Bob, will each vendor use the same cert for signatures (i.e., same
>>     one for SP or IDP)? Seems reasonable (and less confusing) to have
>>     only one.
>>
>>     Thanks, Tom.
>>
>>         -----Original Message-----
>>         *From:* Ciochon, Robert [mailto:Robert.Ciochon@ca.com]
>>         *Sent:* Wednesday, January 26, 2005 7:59 PM
>>         *To:* samldemotech
>>         *Subject:* RSA SAML Interop Conference Call Minutes - January
>>         26, 2005
>>
>>         <<rsademotech-minutes-2005-01-26.doc>>
>>
>>         *Robert Ciochon*
>>         eTrust Development Manager
>>         Computer Associates
>>         San Diego, California
>>         (858) 625-6866
>>         robert.ciochon@ca.com
>>