Sharing SP Metadata amongst multiple SPs

[Phil Lello]

On Sat, Nov 7, 2015 at 6:34 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 11/7/15, 10:54 AM, "users on behalf of Phil Lello" <
> users-bounces at shibboleth.net on behalf of phil at dunlop-lello.uk> wrote:
>
> >For scalability/rapid deployment reasons, I would like to have multiple
> SPs share one set of federated SP metadata.
>
> That makes it impossible for an IdP to distinguish between services,
> manage attribute release, etc. That is generally a bad model for everybody
> but the person trying to avoid work that isn't really all that much work.
> The Internet has an end to end principle that underlies its value, and
> proxies violate that model.
>
> Off soapbox.


Soapbox is fine with me; there were two scenarios I had in mind, rapid
deployment of production environments (where I'll agree it's at best
sub-optimal), and development environments where it's desirable to spin up
n-m instances that should be identical from an integration perspective.
Whilst I agree the avoided work isn't much in principal, my experience is
that application development teams are generally separate from the
shibboleth team (who are generally under-resourced), which inevitably leads
to long delays.

Phil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151107/28e773bb/attachment.html>