Application of Metadata filter slow

[Cantor, Scott]

> We are using OpenSaml version 2.2.1 and have noticed that at the process
> point just before the authenticated session is sent back to the users browser
> a metadata filter is applied for "signature".

In Shibboleth, that isn't the case, so I don't know what you think you're seeing. Metadata handling is not "inline" with responding to users, it's a background process.

>    The filter appears to be looking at an XML file (about 9Mb is this normal?)
> containing the Entity Descriptors and takes over a minute to execute.

I don't think that it takes a minute to verify a signature over a file of that size, but I'm sure it can take a minute to download and update it. None of which would affect respone time other than initial startup.

-- Scott