SP will not provide metadata file: maybe it's not necessary?

Tom Scavo trscavo at gmail.com
Tue Aug 2 12:33:55 EDT 2016


On Tue, Aug 2, 2016 at 12:25 PM,  <shibboleth655 at lewenberg.com> wrote:
>
> This vendor implies that an SP metadata file is not necessary.

Strictly speaking, that is true. The SAML spec does not mandate the
use of metadata.

> I realize
> that we could construct their metadata file for them with the information
> they provided, but, frankly, we don't want to: we feel it sets a bad
> precedent.

Good for you!

> However, I am still new to Shibboleth, so I am thinking: maybe there _is_
> some way to set up an SP in Shibboleth without corresponding metadata. Is
> there?

No, you will have to formulate a SAML EntityDescriptor and feed it to
your deployment.

> If not, and they are simply expecting us to construct the metadata for them,
> I am interested in the opinion of others who run IdPs: do you construct
> metadata for these sorts of SPs?

Sometimes, yes. What else can you do?

Tom


More information about the users mailing list