[java-identity-provider COMMIT] in /trunk/idp-conf/src: main/resources/conf/metadata-providers.xml main/resources/met...

[noreply at shibboleth.net]

Author: rdw
Date: Mon Oct  6 05:33:28 2014
New Revision: 6634

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6634&view=rev
Log:
Move the example (test) metadata over to test.  Make the distributed metadata-providers.xml and empty chain, but bung in some commented out examples.

Review encouraged

Added:
    trunk/idp-conf/src/test/resources/metadata/
    trunk/idp-conf/src/test/resources/metadata/example-metadata.xml
      - copied unchanged from r6632, trunk/idp-conf/src/main/resources/metadata/example-metadata.xml
Modified:
    trunk/idp-conf/src/main/resources/conf/metadata-providers.xml
    trunk/idp-conf/src/main/resources/metadata/example-metadata.xml

Modified: trunk/idp-conf/src/main/resources/conf/metadata-providers.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/metadata-providers.xml?rev=6634&r1=6633&r2=6634&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/metadata-providers.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/metadata-providers.xml Mon Oct  6 05:33:28 2014
@@ -9,19 +9,35 @@
                         urn:mace:shibboleth:2.0:security http://shibboleth.net/schema/idp/shibboleth-security.xsd
                         urn:oasis:names:tc:SAML:2.0:metadata http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd">
                         
-	<!-- ========================================== -->
-	<!-- Metadata Configuration -->
-	<!-- ========================================== -->
+	<!-- ========================================================================================== -->
+	<!--                             Metadata Configuration                                         -->
+	<!--                                                                                            -->
+	<!--  Below you place the mechanisms which define how to load the metadata for the SP you will  -->
+	<!--  provide a service to.                                                                     -->
+    <!--                                                                                            -->
+    <!--  Two examples are provided.  The Shibboleth Documentation                                  -->
+    <!--  https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider provides more    -->
+    <!--  details.                                                                                  -->	
+    <!--                                                                                            -->
+    <!--  NOTE.  This file SHOULD NOT contain the metadata for this IdP.                            -->
+    <!--                                                                                            -->
+    <!-- ========================================================================================== -->
 
-
-	<!-- Example metadata provider. -->
+	<!-- Example HTTP metadata provider.  Use this if you want to download
+	     the metadata from a remote service.
+	     
+	     You *MUST*  provider the SignatureValidationFilter in order to function securely.
+	     Get the PubLic key, and validate it via some out of band mechanism, from the
+	     party publishing the metadata
+	     
+	     The EntityRoleWhiteList saves memory by only loading metadata from entity types
+	     that you will interoperate with. 
     
-	<MetadataProvider id="URLMD" xsi:type="FilesystemMetadataProvider"
+	<MetadataProvider id="HTTPMetadata" xsi:type="FilesystemMetadataProvider"
 		metadataFile="%{idp.home}/metadata/example-metadata.xml">
         
-        <!-- Validates the signature of the metadata and filters out all but SP roles to save memory -->
 		<MetadataFilter xsi:type="SignatureValidation"
-			requireSignedMetadata="false"> <!-- TODO -->
+			requireSignedMetadata="false">
 			<PublicKey>
 				MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg0TyQAP/tIvOH89EtaX
 				uRRn8SYzTj7W1TbNY4VvBmobjkRmSkki4hH9x4sQpi635wn6WtXTN/FNNmkTK3N/
@@ -37,5 +53,20 @@
 		</MetadataFilter>
         
 	</MetadataProvider>
+	
+    -->   
 
+    <!-- Example file metadata provider.  Use this if you want to load metadata
+         from a local file.  You might use this if you have some local SPs
+         which are not "federated" but you wish to offer a service to.
+         
+         If you do not provide a SignatureValidation filter then you *have*
+         to know that the file is valid.
+         
+
+    <MetadataProvider id="LocalMetadata"  xsi:type="FilesystemMetadataProvider" metadataFile="PATH_TO_YOUR_METADATA"/>
+
+     -->
+          
+	
 </MetadataProvider>