metadata management tools

[Tom Scavo]

On Tue, Aug 30, 2011 at 10:30 AM, Liam Hoekenga <liamr at umich.edu> wrote:
> We're looking at bringing up a campus federation to allow UMich only
> resources to start leveraging shibboleth.
>
> We've found an SP self registration tool published by UW that seems like
> it could fit nicely into our plan.  It's the "Service Provider registry
> web service", available from..
>
>     http://staff.washington.edu/fox/shibboleth/
>
> ..but that's really strictly for SP management.  We're looking for
> something to help take this SP-only metadata file and wrap with the "rest"
> of the rest of the federation metadata (IdP information, certificates,
> expiration, etc).

There are a number of items on the InCommon roadmap that will
hopefully make the web interface to InCommon metadata a more general
purpose tool. The most important of these new features is called
delegated administration. By Fall 2011 I2MM, InCommon site admins will
be able to delegate the administration of SP metadata to other
individuals in their security domain, presumably the SP operators
themselves. Using delegated administration, changes to SP metadata
bubble up to the site admin where the metadata is approved and
submitted to InCommon for further processing.

Other features on the drawing board include XML submission (of a
complete <md:EntityDescriptor> element), two-factor authentication
(using mobile OTP) and an improved interface for gathering endpoint
information (which next to keys is probably the most important
information in metadata). If there are other features needed for a
general purpose metadata management tool, please let us know.

Tom Scavo
Operations Manager
InCommon.org