Adding SP at metadata to federation at run-time

[Kapil Agarwal]

Hello All,

I am running Shibboleth IdPv3.2.1 (entityID: https://idp.example.com/idp).
I want hundreds of SPs to authenticate with this IdP, all of which will
have entityID of format: https://sp1.example.com/sp,
https://sp2.example.com/sp, and so on.

Now I have created a federation of all *.example.com/sp (federation:
https://federation.example.com/india-federation) and thus have one metadata
file (federation-india.xml) for it, and one entry in metadata-provider.xml
for federation.

Now when a new SP (https://newsp.example.com/sp) is added dynamically at
runtime then I have to open & edit the federation-india.xml and write a new
entry of this newly added SP. Now I will have to run the reload metadata
service to update metadata.

Is this a good way of handing addition of new SP at runtime ? I am
concerned about concurrency issues while writing to federation metadata
file, IO errors and efficiency. Can this be achieved without any file
read/writes either by using regex or any other way ?

Thanks.

-- 
Kapil Agarwal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160604/7a40f51e/attachment-0001.html>