<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
#email-body { min-width: 30em !important; }
#email-page { padding: 8px !important; }
#email-banner { padding: 8px 8px 0 8px !important; }
#email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
#email-fields { padding: 0 8px 8px 8px !important; }
#email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
<tr valign="top">
<td id="email-page" style="padding:16px !important;">
<table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
<tr valign="top">
<td bgcolor="#ffffff" style="background-color:#ffffff;color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://shibboleth.net/images/shib_240x83.png" alt="" style="vertical-align:top;" /></td>
</tr><tr valign="top">
<td id="email-banner" style="padding:32px 32px 0 32px;">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
<img id="email-avatar" src="https://issues.shibboleth.net/jira/secure/useravatar?ownerId=serac%40vt.edu&avatarId=10882" alt="" height="48" width="48" border="0" align="left" style="padding:0;margin: 0 16px 16px 0;" />
<div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
<a class="user-hover" rel="serac@vt.edu" id="email_serac@vt.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=serac%40vt.edu" style="color:#326ca6;">Marvin S Addison</a>
commented on <img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/IDP-701'>IDP-701</a>
</div>
<div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
<a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/IDP-701'><strong>Provide SAML metadata facility for CAS</strong></a>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr valign="top">
<td id="email-fields" style="padding:0 32px 32px 32px;">
<table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
<tr valign="top">
<td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td colspan="2" style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 16px 0;width:100%;">
<div class="comment-block" style="background-color:#edf5ff;border:1px solid #dddddd;color:#000000;padding:12px;"><p>Sample CAS metadata entry:</p>
<div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent">
<pre class="code-java"><EntityDescriptor entityID=<span class="code-quote">"https:<span class="code-comment">//cas-service.example.com"</span>>
</span> <SPSSODescriptor protocolSupportEnumeration=<span class="code-quote">"http:<span class="code-comment">//www.jasig.org/cas/protocol"</span>>
</span> <KeyDescriptor>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<AssertionConsumerService
Binding=<span class="code-quote">"http:<span class="code-comment">//www.jasig.org/cas/protocol"</span>
</span> Location=<span class="code-quote">"https:<span class="code-comment">//cas-service.example.com/base-uri"</span>
</span> index=<span class="code-quote">"1"</span>/>
</SPSSODescriptor>
</EntityDescriptor>
</pre>
</div></div>
<p>Relying party selection against metadata is given by the following algorithm:</p>
<p>Given a service URL, S, provided by the CAS protocol, for every defined entry, E, with an SPSSODescriptor element, find the AssertionConsumerService where the Location attribute value, V, satisfies the following predicate, <tt>S.startsWith(V) == true</tt>. Return the entity ID of E if a match is found, otherwise null.</p>
<p>The presence of a certificate in the metadata entry is an implicit signal to grant proxy authorization using the cert as trust material for the proxy callback. In fact this method of proxy trust configuration is dramatically simpler assuming the MetadataPKIXValidationInformationResolver can be used.</p></div>
<div style="color:#505050;padding:4px 0 0 0;"> </div>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td><!-- End #email-page -->
</tr>
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
This message is automatically generated by JIRA.<br />
If you think it was sent incorrectly, please contact your JIRA administrators<br />
For more information on JIRA, see: <a style='color:#326ca6;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
</td>
</tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->