testshib sp - please bear with me

[Nate Klingenstein]

> For years we have been using the folder MetadataProvider - against Scott’s suggestion I’ll add.

(my fault on both this choice and the existence of the implementation, but it still makes me sad that it doesn’t work)

There is something that creates an aggregate already, which the IdP uses, so we’re not working from scratch here, but it has proven extremely difficult to block every conceivable piece of metadata that is not loadable by either the IdP or the SP.  The folder provider was a way to limit the damage from bad metadata, which used to take out everything.

Now it’s taking out everything again, of course.  Better implementation choices have come along.  And, <3 volunteers for helping deploy them. :p

> And for quite some time the SP itself has been exhausting the system resources of the host on (re)load of the metadata store.  (currently 1068 entries and only 740 are valid) :P

This is with a 30 day rolling window in place removing old entries.  There have been that many separate registrants over the last 30 days.

It had stood at 600 around a year ago, which I thought was already pretty amazing.  We’ve seen a serious uptick in usage.