is there a way to check if SP metadata been loaded into IdP?
Tom Scavo
trscavo at internet2.edu
Wed Feb 4 08:47:23 EST 2015
On Tue, Feb 3, 2015 at 10:44 PM, Qian, Yi <yqian at ku.edu> wrote:
>
> I googled, but no result, I have hundreds SP's metadata loaded into our
> IdP, my question is that is there a way to check if certain SP data is
> loaded?
Yes, but let me try to get my arms around your entire question...
> something like /idp/profile/Metadata/SAML displays IdP metadata?
Do you mean you want to retrieve (trusted metadata in a browser
window? No, I don't think that is possible since metadata is sometimes
retrieved just-in-time, as needed by the IdP.
What you *can* do is present an AuthnRequest for the SP in question
and observe the IdP's reaction. Since SP metadata is required for the
IdP to process the AuthnRequest, if a login handler is invoked (i.e.,
if the login page is presented to the user), you can conclude the IdP
has (trusted) metadata for the SP.
Tom
More information about the users
mailing list