OpenSAML user discussion

[Chris Card <>]

Hi,
do the SAML specs give any guidance on how to manage certificates used to verify signatures on AuthnRequests and Assertions, especially in
the case where there are multiple IDPs talking to an SP. For example, if the SP certificate changes, the consequent metadata change must be propagated to all
the IDPs, and while the propagation is happening there's a time window where it's possible that an IDP will reject an AuthnRequest because it hasn't received the new certificate.

Chris