Federation metadata signature

[Peter Schober]

>>> There are several tools that will work: shibboleth MA1, pyFF.io
>>> and PhPh.
>>
>> Or samlsign, from the Shiboleth SP distribution.
>> Or xmlsec.
>> Or xml-seurity-c's templatesign.
>> Or...
>
> The reason I didn't list those is that they require a bit of
> integration work to be useful in practice.

Sure. I just tried to answer the more literal question, how do I sign
SAML metadata.

Most of the OP's questions do not really belong here, but on the
REFEDS or FOG list, for example. (Why is metadata signed, how do I do
it, what and how do I build a test federation, etc.)

And of course "require[s] a bit of integration work" can also be said
about all SAML metadata aggregators. For Shib MA1 that's quite an
understatement even, for example.
-peter