importing SP metadata

Christopher Bongaarts cab at umn.edu
Tue Oct 23 12:04:31 EDT 2012


On 10/23/2012 6:43 AM, Peter Schober wrote:
> * Kevin P. Foote <kpfoote at iup.edu> [2012-10-23 04:57]:
>> Generally speaking though, you adjust your relying-party.xml file to
>> pick up the new metadata.
>
> I'd advise against that.

For small numbers of SPs, it's not a bad way to go, provided that you 
add "from local files" to the end of that (or "validated by signatures" 
but I think we're looking for simplest approaches here).

For larger numbers of SPs, or in situations where you have frequent 
updates/additions to metadata, it typically makes more sense to combine 
the metadata files into a single file (wrapped with 
<EntitiesDescriptor>) so you don't have to touch the relying-party.xml 
file so much.
-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%


More information about the users mailing list