ShibbolethSP : Dynamic MetadataProviders list

[Cantor, Scott]

On 8/21/14, 10:33 AM, "Paolo de vathaire" <paolodv at free.fr> wrote:
>
>Every client who wants to be part of my federation will upload their
>metadata containing an EntityDescriptor

That's really up to you, but you will have a lot of problems. What you get
won't be correct in many cases, or will contain XML errors, and you will
have a ton of work to do to have any shot at automating the aggregation.
It is very hard.

You're probably better off collecting specific information and
constructing metadata yourself.

>I will read and validate the uploaded file against the schema ad then
>insert the EntityDescriptor inside my federation metadata file as this :

The schema is not the sum total of the checking you would have to do.

>When there are more, the file is correctly loaded at startup but the
>TrustEngine cannot retrieve the certificate for other EntitiesDescriptor
>but the first specified.

Keys are inside EntityDescriptors, not EntitiesDescriptor.

>Do you have an idea on what I'm doing wrong ?

No idea.

-- Scott