ShibbolethSP : Dynamic MetadataProviders list

[Paolo de vathaire]

Ok, thanks for your advices.
I'll probably use the Shibboleth MDA.


2014-08-21 17:00 GMT+02:00 Cantor, Scott <cantor.2 at osu.edu>:

> On 8/21/14, 10:33 AM, "Paolo de vathaire" <paolodv at free.fr> wrote:
> >
> >Every client who wants to be part of my federation will upload their
> >metadata containing an EntityDescriptor
>
> That's really up to you, but you will have a lot of problems. What you get
> won't be correct in many cases, or will contain XML errors, and you will
> have a ton of work to do to have any shot at automating the aggregation.
> It is very hard.
>
> You're probably better off collecting specific information and
> constructing metadata yourself.
>
> >I will read and validate the uploaded file against the schema ad then
> >insert the EntityDescriptor inside my federation metadata file as this :
>
> The schema is not the sum total of the checking you would have to do.
>
> >When there are more, the file is correctly loaded at startup but the
> >TrustEngine cannot retrieve the certificate for other EntitiesDescriptor
> >but the first specified.
>
> Keys are inside EntityDescriptors, not EntitiesDescriptor.
>
> >Do you have an idea on what I'm doing wrong ?
>
> No idea.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140821/5f98d0ae/attachment.html