metadata generation

[Nate Klingenstein]

Actually, I suppose, as we’re writing the install scripts we can just grab the IdP metada and stick on the SP as they spin up.

If you're writing installation scripts and distributing those, you can do many interesting things.  I'd host it on the IdP, sign it, and then have a fixed pointer in the default SP configuration with signature validation in place so that you can change this someday without working with all those SP admins.

And we can script any midifications ot the SP data from info collected in the install process.

Well, SP config and metadata, but yes, you should be able to.  Off the top of my head, I'd collect data, install, set up SP config with data and template, send SP metadata to a manual work queue on IdP, and finally start the SP.

Peter and Scott both have more on the top of their heads than I do.

If you end up with something generally useful and distribution-grade, always consider the contributions page.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140620/8923d6b1/attachment.html