Attribute Push with SAML2 Providers

[Cantor, Scott]

On 8/30/11 5:15 PM, "Leung, Warren" <wleung at it.ucla.edu> wrote:
>
>I was wondering what the best option was for configuring a SAML1/2 SP for
>pushing of attributes.

The defaults are appropriate.

>  We currently have these SP's configured in our
>relying-party.xml like the documentation has them, but whenever we add new
>additional ones we have to restart our application server.

There isn't any reason or need to do that in the majority of cases.

>Is there an alternative in configuring these SP's so we don't have to
>reload relying-part.xml or is setting a
>configurationResourcePollingFrequency for the reload of relying-party.xml
>the best option in a production environment?

No, you should never need to touch it. Doing so is generally a sign you're
confused about something, or you may need to create special settings for
people using commercial (i.e., broken) SAML products.

-- Scott