metadata generation

Nate Klingenstein ndk at internet2.edu
Fri Jun 20 14:28:58 EDT 2014


I know you can go to Shibboleth.sso/Metadata and dl that file to give to the IdP. A couple questions...

Well, as a basis for what you give to the IdP, but yeah.

Is that information based on a template and if so can I modify it to include things like organization information automatically?

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler#NativeSPHandler-MetadataGenerationHandler

Is it common practice to allow the IdP retrieve the Metadata from the SP via that handler and vice versa or is a manual method preferable to exchange that information?

Yes, it's common practice, but no, it's not recommended.

The most preferable method of metadata exchange is through a common federation.  Second would probably be bilateral exchange through whatever method is comfortable for you and the IdP.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140620/f6493624/attachment.html 


More information about the users mailing list