load IdP metadata in SP

[Peter Schober]

Please don't reply to completely unrelated threads. (Changing the
email's subject is not sufficient). Instead compose a new mail to the
list for new topics/support requests.

* Qian, Yi <yqian at ku.edu> [2013-06-20 20:07]:
> In SP
>  <MetadataProvider type="XML" uri=""
> Will it work if I put http://idp_url/idp/profile/Metadata/SAML as uri?

Well, it's a valid URL, so yes. But that's not recommended.

If that metadata is not cryprographically signed by a trusted
certificate you open yourself to simple DNS-based attacks (someone
substrituting their own metadata at that URL).

Also that URL just serves up the IdP's own idp-metadata.xml file,
which is not dynamically generated based on the IdP configuration (but
maintained by the IdP admin, likely by hand). So it won't
automagically pick up any changes in the IdP configuration. Many never
bother to update that file (i.e., it might be neglected and unused).
-peter