Vary ResponderId by Metadata Source

Cantor, Scott cantor.2 at osu.edu
Tue Sep 13 10:28:56 EDT 2016


On 9/13/16, 6:28 AM, "users on behalf of Marvin Addison" <users-bounces at shibboleth.net on behalf of marvin.addison at gmail.com> wrote:

>    Thanks for pointing out that use case, which is quite important. There's no sense
> trying to predict the future, so I'll stick with walking the tree for now and keep an eye
> on the dynamic metadata capability as it develops.

Well, it's coming, but the assumption here is that you're using groups on metadata you control, and that probably will always be files.

There aren't any reliable groups you could use with the InCommon metadata, again because of the MDQ roll out later, but InCommon has other tools for recognizing entities it registered.

> I did a quick search for an IdP
> issue tracking that work but didn't see it; let me know if there is one so I can add
> myself as watcher.

It's an OpenSAML feature and was shipped in 3.2, though it needs some enhancements.

-- Scott




More information about the users mailing list