Should IDP/SP metadata contain a roleDescriptor tag?

[Tom Scavo]

On Mon, Jul 9, 2012 at 12:38 PM, Wessel, Keith William
<kwessel at illinois.edu> wrote:
>
> Since we're not going to find roleDescriptor tags in the InCommon metadata but rather the derived tags for idpSSODescriptor and spSSODescriptor, I think the vendor's going to need to sort this out if, in fact, it does insist on roleDescriptor. That's still unclear.

May I ask, is this AD FS? I recall seeing this kind of thing in the AD FS docs.

> At any rate, I appreciate the info... and the suggesting of running it through validation. By validation, I assume you're referring to xmlsectool, correct?

Yes, xmlsectool is what we use. There is a set of schema files on the
previously mentioned wiki page that lets you do offline schema
validation. (If you try to schema validate without them, the network
might get in your way.)

Tom