metadata generation

Jeff Masiello jmasiello at actionet.com
Fri Jun 20 14:32:20 EDT 2014



Is that information based on a template and if so can I modify it to include things like organization information automatically?

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler#NativeSPHandler-MetadataGenerationHandler

Thank you!


Is it common practice to allow the IdP retrieve the Metadata from the SP via that handler and vice versa or is a manual method preferable to exchange that information?

Yes, it's common practice, but no, it's not recommended.

The most preferable method of metadata exchange is through a common federation.  Second would probably be bilateral exchange through whatever method is comfortable for you and the IdP.

The term Common Federation sort of loses me. In our system, specifically, we have one IdP and multiple SP's from various places and add new SP's randomly. I guess what I'm trying to find is a good common practice to exchange that information that isn't tedious. Our users who install the SP which we supply generally are not super technical.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140620/0e858e7a/attachment.html 


More information about the users mailing list