Shibboleth SP: Generating metadata using a template

[Cantor, Scott]

>    Such a disappointment .... So if I want to supply an url to my IDP to fetch
> metadata, I have to put it  there by hand?

Any IdP that would accept that is almost certainly running insecurely, and in most cases you'd be feeding it the wrong metadata during a key rotation, which is the primary purpose of having metadata.

It's not a "I'm doing this to you" problem, it's a "this makes literally no sense to begin with" problem. Getting rid of the feature is simply correcting the fact that it should never have existed.

But even if none of that were true, there is absolutely no way it's going to survive the rewrite into Java, it's just not possible without work reaching into the dozens or 100+ hour range and that's not happening.

> I  tried to use metagen.sh but that doesn't do the job either. 

It's an example, it can be tweaked in all kinds of ways to do more stuff, as I have done, or RFEs filed for whenever I get around to polishing it up for later.

-- Scott