Metadata file for SP Server

[Roy Spectech]

Community,

    Being new to the Shibboleth world, I hope this question is not too
basic.

    We've just put together our first SP server (Shibboleth 2.52 on RHEL
5.9)
    to protect a service application for our customers.

    Following the WiKi docs, we think we have most everything ready. As a SP
    Provider, we will need a metadata file for the customer IdP servers.

    We used something like this URL to see what our customers would see:

       https://metaserve.example.com/Shibboleth.sso/Metadata

    At the very top of the generated file is this warning:

    <!--
    This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
     -->

    Wow. OK. Then we went back to the WiKi and found these:

       https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataForSP

    and this:


https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler#NativeSPHandler-MetadataGenerationHandler


This seems like a very complicated file. We certainly do not want to get it
wrong.

    Is there a general "Metadata Generator" out here that will look at our
    shibboleth2.xml, attribute-map, etc., and make a better attempt at a
"good"
    metadata file?

    Failing that, since some day we might want to apply to a Federation
(doing
    just one metadata is fine with us), is there an accepted
format/template we
    can download as a starting point? Or are there examples of what would be
    considered best practice Metadata files?

    Another seemingly silly question. Once we get the file the way we want
it,
    where is it supposed to go in the file structure?

    The URL:

       https://metaserve.example.com/Shibboleth.sso/Metadata

    seems to be just a handler. There is no "Metadata" file in the file
tree to
    edit/replace.

    After we perfect the metadata file, how do we "update" the existing
version
    so the the customer IdP servers see the updated metadata?


    Thank you very much everyone!


-- RGS

==================================
Roy G. Specter
roygspectech8 at gmail.com
========================================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130715/fbe746d5/attachment-0001.html