Choosing EntityIDs

Every component of a Shibboleth system has to have a unique name, called an entityID, used to identify it.

If your SP already has an entityID in some other federation then you should use that when configuring and registering an SP to work within the University or UK federation.

If your SP doesn't already have an entityID, create one. It should be an https: URL (even if the SP doesn't support SSL) based on a DNS name that you control, perhaps the the service name under which the SP operates or the host name of the computer operating the web site, followed by '/shibboleth'. Examples:

 https://mnementh.csi.cam.ac.uk/shibboleth

 https://www.cam.ac.uk/shibboleth

For preference choose a host name that has a long-term future (at least as long as the corresponding SP) because changing an entityID is difficult. So using a service name (such as www.cam.ac.uk) is preferable to using the name of the underlying host providing a service.

This URL does not have to resolve to anything. It's just a unique name and a URL is only being used because it provide a an easy way to create a unique name using delegated information (host names) that already exists.

There is further information about entityIDs on both the UK federation and the Internet2 websites.