Errors after Relying Party Service Reload

[Christopher Bongaarts]

On 4/2/2012 3:44 PM, Cantor, Scott wrote:

>> When adding a new SP to the IdP (1:1 trust), I have to add a new
>> MetadataProvider element in relying-party.xml to load the SPs metadata file.
>> How can I add a new SP without reloading relying-party.xml?
>
> You load all those SPs in one common file.

This is essentially what we do - we have one MetadataProvider to load 
federation metadata, and another that loads a partners metadata file 
that just has all the metadata we've collected from one-offs stuffed 
into one file (bracketed by <EntitiesDescriptor>).  We generate this 
programmatically, along with our attribute filter file.

So we don't have to update relying-party often.  The usual case is to 
turn off encryption for SPs that don't support it.
-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%