[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/conf/metadata-providers.xml
noreply at shibboleth.net
noreply at shibboleth.net
Sun Jun 7 17:13:29 EDT 2015
Author: scantor
Date: Sun Jun 7 17:13:28 2015
New Revision: 7547
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7547&view=rev
Log:
Improve comments a bit.
Modified:
trunk/idp-conf/src/main/resources/conf/metadata-providers.xml
Modified: trunk/idp-conf/src/main/resources/conf/metadata-providers.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/metadata-providers.xml?rev=7547&r1=7546&r2=7547&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/metadata-providers.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/metadata-providers.xml Sun Jun 7 17:13:28 2015
@@ -25,16 +25,19 @@
<!-- -->
<!-- ========================================================================================== -->
- <!-- Example HTTP metadata provider. Use this if you want to download
- the metadata from a remote service.
-
- You *MUST* provider the SignatureValidationFilter in order to function securely.
- Get the PubLic key, and validate it via some out of band mechanism, from the
- party publishing the metadata
-
- The EntityRoleWhiteList saves memory by only loading metadata from entity types
- that you will interoperate with.
+ <!--
+ Example HTTP metadata provider. Use this if you want to download the metadata
+ from a remote source.
+
+ You *MUST* provide the SignatureValidationFilter in order to function securely.
+ Get the PubLic key, and validate it via some out of band mechanism, from the
+ party publishing the metadata
+
+ The EntityRoleWhiteList saves memory by only loading metadata from SAML roles
+ that the IdP needs to interoperate with.
+ -->
+ <!--
<MetadataProvider id="HTTPMetadata"
xsi:type="FileBackedHTTPMetadataProvider"
backingFile="%{idp.home}/metadata/localCopyFromXYZHTTP.xml"
@@ -50,20 +53,20 @@
<RetainedRole>md:SPSSODescriptor</RetainedRole>
</MetadataFilter>
</MetadataProvider>
-
-->
- <!-- Example file metadata provider. Use this if you want to load metadata
- from a local file. You might use this if you have some local SPs
- which are not "federated" but you wish to offer a service to.
-
- If you do not provide a SignatureValidation filter then you *have*
- to know that the file is valid.
-
-
+ <!--
+ Example file metadata provider. Use this if you want to load metadata
+ from a local file. You might use this if you have some local SPs
+ which are not "federated" but you wish to offer a service to.
+
+ If you do not provide a SignatureValidation filter, then you have the responsibility to
+ ensure that the contents are trustworthy.
+ -->
+
+ <!--
<MetadataProvider id="LocalMetadata" xsi:type="FilesystemMetadataProvider" metadataFile="PATH_TO_YOUR_METADATA"/>
-
- -->
+ -->
</MetadataProvider>
More information about the commits
mailing list