Archaeology

[Tom Scavo]

On Thu, Aug 31, 2017 at 11:54 AM, Rod Widdowson
<rdw at steadingsoftware.com> wrote:
>> Rod, can you be more specific about what you mean by the "Shibboleth
>> Metadata format?" Can you give an example or a pointer?
>
> Before SAML2 metadata The IdP and WAYF consumed metadata in a shibboleth format.
>
> I'm pushed for time but I _think_ that [1] this is example schema
>
> [1]
> http://git.shibboleth.net/view/?p=java-centralized-discovery.git;a=blob;f=src/schemas/shibboleth.xsd;h=392fed454281e90994beb35c971e66788a5a4c37;hb=e6a8431c8c1267cbfc315ae205f521700c1b27a2

That's interesting. That schema is mildly reminiscent of SAML
Metadata. The most obvious similarities are the "ContactTypeType" and
the "validUntil" and "cacheDuration" attributes. But the element
"OriginSite" is unique to Shibboleth since SAML V1.1 used "SourceSite"
instead. Compare with the earliest known metadata schema from OASIS.
[2]

If you haven't seen it yet, a new History of SAML Metadata [3] has
recently appeared. The origins of SAML Metadata are clearly traced to
the Liberty Alliance, but the origins of *that* are mostly unknown.
It's likely that Shibboleth Metadata => Liberty Metadata => SAML
Metadata in the same way that the Shibboleth AuthnRequest Protocol
ultimately influenced SAML2.

Tom

[2] https://www.oasis-open.org/committees/security/docs/draft-sstc-schema-meta-data-01.xsd
[3] https://en.wikipedia.org/wiki/SAML_Metadata#History_of_SAML_Metadata