IdP credentials for delegation Assertion signature validation

[Cantor, Scott]

On 8/20/15, 10:23 PM, "dev on behalf of Brent Putman" <dev-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:
>
>Maybe something on the profile config bean could work.  Because of the reloadability I'm assuming you don't mean inject credential beans directly, but rather something that exposes them or uses them.

Well, I was responding to the original thread and I meant injecting them directly because the profile config beans and the credential beans are currently both inside the RP service context.

I realize that in theory, yes, you can define credentials in disconnected places in that configuration and attach them directly to things, but in practice they'd be in credentials.xml and referenced where needed.

I don't think it's a bad idea to have a credential "service", but I don't know that it's 100% required.

-- Scott