SP V3 metadata types

Cantor, Scott cantor.2 at osu.edu
Mon Jun 11 14:13:14 EDT 2018


> I hesitated posting this again since it may be misinterpreted. I am not making a
> value judgment. I am simply pointing out that the largest federation in the
> world is making this recommendation. If you step back and think about it, it's
> actually quite reasonable to do. Whether it catches on worldwide is another
> question.

We don't think anything like that is really needed, but to the extent that you want to do it we simply saw it as something you can do by priming the software at startup with the necessary queries, it doesn't need to be explicitly configured. It also presumes you actually restart your IdP frequently, and no mature IdP does if it's operated the way we intend.
 
Either way, the Folder hack doesn't really work for that, so I don't know what you had in mind there. It doesn't load fragmentary metadata configs, but actual metadata outright, so it would subsume the remote copy.
 
> If you (the Shib dev team) don't think this is a Good Thing To Do, please let me
> know so I can remove the example from the wiki.

I believe we felt it unnecessary in light of existing features and how it's all meant to be run. But to the extent you want to do it, the SP already can (as shown there) and Folder certainly doesn't help.

-- Scott



More information about the dev mailing list