Sharing SP Metadata amongst multiple SPs

Cantor, Scott cantor.2 at osu.edu
Sat Nov 7 13:34:04 EST 2015


On 11/7/15, 10:54 AM, "users on behalf of Phil Lello" <users-bounces at shibboleth.net on behalf of phil at dunlop-lello.uk> wrote:



>For scalability/rapid deployment reasons, I would like to have multiple SPs share one set of federated SP metadata.

That makes it impossible for an IdP to distinguish between services, manage attribute release, etc. That is generally a bad model for everybody but the person trying to avoid work that isn't really all that much work. The Internet has an end to end principle that underlies its value, and proxies violate that model.

Off soapbox.

-- Scott



More information about the users mailing list