SP Startup takes 20+ minutes

[Scott Koranda]

> Using this bash script/offline verification doesn't open us up to any
> potential vulnerabilities, right?

Potentially it does.

You need to fully understand the trust model and what role digital
signing of the SAML metadata plays in that model, as well as the
potential failure modes for the script/offline verification technique,
so that you can then balance the risks for your project. 

If you blindly apply the technique without fully understanding it you
are more likely to leave yourself vulnerable.

Scott K