Vary ResponderId by Metadata Source

[Cantor, Scott]

> Ideally we'd like to set responderId dynamically via a function that gets the
> IdP entity ID from the metadata source from which the SAML peer was
> determined. That seems technically feasible via
> RelyingPartyConfiguration#setResponderIdLookupStrategy(), but I don't see
> how to practically determine the metadata group from which the
> EntityDescriptor came. Is that possible? Am I going about this the right way?

I assume you're on a snapshot, I think the strategy property is part of the refactor I did for the next version. That certainly is there for that purpose, to support function-driven configuration settings.

If the metadata is locally managed, then you could use groups, you just have to be careful with it. The group data is formally there in the parent object(s) up above the EntityDescriptor, but we also annotate all the metadata with the EntitiesDescriptor names when the metadata gets loaded and that's already implemented for you:

org.opensaml.saml.common.profile.logic.EntityGroupNamePredicate

-- Scott