MetadataProvider, Loading your own metadata?
Scott Koranda
skoranda at gmail.com
Tue Oct 1 17:38:59 EDT 2013
On Tue, Oct 1, 2013 at 12:40 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 10/1/13 3:10 PM, "Zmuda, Matthew R" <Matthew.R.Zmuda at td.com> wrote:
>
>>Is it necessary to load your own metadata file in IDP relying-party.xml
>>in MetadataProvider?
>>I noticed our IDP config does load its own metadata which we share with
>>our partners. However I don¹t understand why its there so I removed it
>>and SSO seems to still work as expected.
>
> There are some little used features that unfortunately rely on it but it's
> unlikely you'd run into any of them. The other place it gets used is as
> input to NameID format selection algorithm.
>
When there is time I would be grateful if you could provide details on
how the IdP's
metadata is used as input to the NameID format selection algorithm.
I have read this wiki page
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier
but I did not immediately understand how the IdP's own metadata is used
as part of the selection algorithm.
What have I missed?
Thanks,
Scott K
More information about the users
mailing list