"what metadata are you using"

[Cantor, Scott]

On 5/28/14, 10:34 AM, "Ian Young" <ian at iay.org.uk> wrote:

>
>On 28 May 2014, at 15:29, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> The SP has enough dynamism that it probably wouldn't need to be done in
>> any special way, but the IdP's a different story.
>
>Another thing that struck me about the SP is that it already has a lot of
>private endpoints and an IP access mechanism to protect them. I don't
>think we have that in the CDS or IdP yet, do we?

The IdP has a status handler, but in V2 the access control on it is inside
web.xml. I changed that in V3 by turning it into a webflow, but there's
still a requirement to supply the ACL, and we just don't have any way to
do that dynamically right now unless we build some kind of service layer
to supply the access rules.

Of course, one can usually do this in the web server, but that's also not
often dymamic unless Apache is used, but maybe that's good enough.

-- Scott