Auto-reload the relying-party and attribute-Resolver

Cantor, Scott cantor.2 at osu.edu
Thu Aug 8 14:56:48 EDT 2013


On 8/8/13 2:52 PM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>A way to apply ProfileConfiguration to sets of entities without
>managing the whole EntityDescriptor locally (i.e., only reference
>entityIDs, e.g. in an XRD file?) would make this easier.  Or borrowing
>some language from the filter configuration where you can OR entityIDs
>together.

EntityAttribute tags are certainly the focus for this, but that doesn't
generally fit the definition of "no control".

In the SP, my solution for this was to stick with EntityAttribute-based
rules but have an EntityAttributes metadata filter that locally applies
tags to the IdPs as the metadata is consumed, thus moving the "OR" rule to
that filter.

-- Scott




More information about the users mailing list