OpenSAML3.3 Correct way to read (adfs) FederationService.xml?

[Brent Putman]

On 5/23/17 12:48 PM, Rob Audenaerde wrote:
> Ah I see. Thanks!
>
Great.

>
> for ( EntityDescriptor idpEntityDescriptor : idpMetaDataProvider )
> {
>                     ...........
> }
>

Yes, you can do that with a batch metadata resolver, since it implements
Iterable<EntityDescriptor>.   That might be typical for a discovery
service, etc.

However, just FYI, that's not how one would typically use a metadata
resolver in an IdP or SP scenario.  You'd use one of the resolve methods
+ a CriteriaSet to resolve the entity(ies) that you wanted, based on the
criteria you supply.  Usually that's just entityID, so that case is
pretty simple.

What you are *usually* interested in for SSO though is actually finding
the right RoleDescriptor for the peer with which you are communicating.
There is a similar RoleDescriptorResolver abstraction for that.  The
impl that we have of that simply wraps a MetadataResolver, passing the
supplied criteria through.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170523/9e319bd1/attachment.html>