Publishing IdP's metadata?
Jeremy Morton
jez9999 at gmail.com
Thu Feb 5 10:46:45 EST 2015
Yeah but for testing purposes I just need a quick way for my SP to get at
that data via HTTP(S). Thanks. However, there is still a problem with
/idp/shibboleth - the <?xml... has two newlines in front of it, which is
invalid XML. Can this be fixed?
On Thu, Feb 5, 2015 at 3:11 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 2/5/15, 2:57 PM, "Jeremy Morton" <jez9999 at gmail.com> wrote:
>
>
>
> >How do I publish my Shibboleth IdP's metadata? I see the
> >metadata/idp-metadata.xml file, but what URL do I need to use to access
> >it?
>
> The Shibboleth "model" is that you register it with a trusted third party
> that brokers it, so you don't publish it at all.
>
> If you want a different model, the security of that model is up to you to
> own, and the answer to "how" is that you prepare it and make it available
> in whatever way you deem appropriate.
>
> The metadata in that file is available at /idp/shibboleth. Because it's
> not generated dynamically but is essentially whatever you put in that
> file, and thus controllable, it's fine to use that URL for the most part.
> But that's meaningless by itself. You're just self-asserting the
> information.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150205/e99b6086/attachment.html
More information about the users
mailing list