docs for new DynamicHTTPMetadataProvider?

[Brent Putman]

On 1/12/15 5:55 PM, Tom Scavo wrote:
> InCommon is preparing to announce a beta Metadata Query Server that
> serves both per-IdP metadata and per-SP metadata. See the top of this
> wiki page for more info: https://spaces.internet2.edu/x/3w7kAg

Cool.
>
> AFAICT there still is no documentation for the new
> DynamicHTTPMetadataProvider. Can someone cobble together a wiki page
> or at least give some hints how to do this?


I'd venture that any real solid docs are going to be a little while. 
Scott or someone has some structure in place, but filling it is still
pending....

For the moment, if you just want some quick and dirty examples, I could
point you to some basic unit test examples, as well as the schema. The
latter does have docs in it for what the various parameters do - many
are shared by all the providers, so need to look at the type inheritance
for DynamicHTTPMetadataProvider and
AbstractDynamicHTTPMetadataProviderType, etc.


Basic MDQ style of usage, with all default params:

http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/relyingparty/metadata/dynamicMetadataQueryProtocol.xml?revision=6930&view=markup

As you can see there's not much to it. You give it the "base URL" as
defined by the spec (i.e. without the /entities on the end).  For the
IdP 3.x, note that we have explicit support configuring MDQ (the other 3
dynamic "modes" of usage are 1) template 2) regex and 3) well-known
location per the metadata spec).  With the current SP stuff, AFAIK you
have to sort of cobble it together using the <Subst> input and plugging
in the entityID param, etc.  No need to do that in the IdP.




Main non-default params for the dynamic provider in general:

http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/relyingparty/metadata/dynamicBasicParams.xml?revision=7083&view=markup



All the extant examples of the dynamic provider are in this dir, the
ones that start with "dynamic..."

http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/relyingparty/metadata/



The IdP metadata config schema:

http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-schema/src/main/resources/schema/shibboleth-metadata.xsd?revision=7235&view=markup

Hopefully most of the attributes are self-explanatory, or the doc
annotations are clear enough for the your short-term needs, but if not,
let me know and I'll elaborate.


Hope that's enough to get you started until we have some real docs.

--Brent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20150112/8a428bf4/attachment.html