Choosing EntityIDs: Difference between revisions
(Try to make clear that entityIDs need to be unique) |
(Fix Wiki hostname for Shib Consortium) |
||
| Line 13: | Line 13: | ||
This URL '''''does not have to resolve to anything'''''. It's just a unique name and a URL is only being used because it provide a an easy way to create a unique name using delegated information (host names) that already exists. | This URL '''''does not have to resolve to anything'''''. It's just a unique name and a URL is only being used because it provide a an easy way to create a unique name using delegated information (host names) that already exists. | ||
There is further information about entityIDs on both the [http://www.ukfederation.org.uk/content/Documents/EntityIDPolicy UK federation] and the [https:// | There is further information about entityIDs on both the [http://www.ukfederation.org.uk/content/Documents/EntityIDPolicy UK federation] and the [https://wiki.shibboleth.net/confluence//display/SHIB2/EntityNaming Internet2] websites. | ||
Revision as of 19:34, 20 June 2012
Every component of a Shibboleth system has to have a unique name, called an entityID, used to identify it.
If your SP already has an entityID in some other federation then you should use that when configuring and registering an SP to work within the University or UK federation.
If your SP doesn't already have an entityID, create one. A recommended default is to use a URL based on the DNS name under which the SP operates, followed by '/shibboleth'. Failing that use some other URL based on a hostname that you control, but remember that each entity needs a unique name so don't use any name more than once. Try to use a hostname that has a long-term future since changing entityIDs can be disruptive. If the site supports https (which it will have to if it's ever going to be registered in the UK federation) then this should be a https URL. Examples:
http://mnementh.csi.cam.ac.uk/shibboleth https://www.cam.ac.uk/shibboleth
For preference choose a host name that has a long-term future (at least as long as the corresponding SP) because changing an entityID is difficult. So using a service name (such as www.cam.ac.uk) is preferable to using the name of the underlying host providing a service.
This URL does not have to resolve to anything. It's just a unique name and a URL is only being used because it provide a an easy way to create a unique name using delegated information (host names) that already exists.
There is further information about entityIDs on both the UK federation and the Internet2 websites.
