IDP metadata in 3.0

[Cantor, Scott]

On 1/14/15, 3:49 PM, "Hong Ye" <hy93 at cornell.edu> wrote:



>In Shib IDP 2.x, I can look at my IDP’s metadata from 
>https://myIDPdomain/idp/profile/Metadata/SAML. After upgraded to IDP3.0, 
>I got 404 error when accessing the metadata. What I did wrong for the 
>upgrade?

That was never an officially documented location. The way V2 worked that 
was officially supported was to forward /idp/shibboleth to the metadata 
and I implemented that in V3.

It's also irrelevant because you should never under any circumstances get 
metadata directly from a running system. If the IdP ever generated the 
metadata the way the SP does, the same reasons for never using the SP's 
metadata directly would apply.

-- Scott