spid-php-lib
spid-php-lib copied to clipboard
Support multiple certificates for a single IdP
Some Identity Providers (like Infocert) have multiple signing certificates in their metadata, so we should support all of them.
I checked today all 9 IdPs in production, the same X509Certificate under EntityDescriptor->Signature->X509Data is in EntityDescriptor->IDPSSODescriptor->KeyDescriptor->KeyInfo->X509Data
I propose to defer this one
deferring ...