Is there a checklist for the metadata file?

[David Langenberg]

On Mon, Mar 30, 2015 at 7:11 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Tom Scavo <trscavo at gmail.com> [2015-03-30 14:44]:
> > > I don't use InCommon for on-campus systems, and I don't supply the
> > metadata for our IdP to them with it. I host the metadata file, but
> > I also sign it every morning, and it expires every few days, and the
> > (Shibboleth) SPs check all of that when they load it every few
> > hours.
> >
> > Hopefully, soon, you (and others) won't have to do that any more:
> >
> >
> http://mdq-beta.incommon.org/global/entities/urn%3Amace%3Aincommon%3Aosu.edu
>
> You'd still have to point them elsewhere and explain to them why they
> should trust any output from that, same as with an aggregate that gets
> filtered after downloading (whether it's your own or a federation's).
>

It's not that hard to get them to point elsewhere especially when they
don't get a choice in the matter.

Dave

-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150330/8c2bfddb/attachment.html