Communicate with SP: Am I going Mad?

[Cantor, Scott]

On 9/26/16, 10:58 AM, "users on behalf of Kevin Ratcliffe" <users-bounces at shibboleth.net on behalf of kratcliffe at bolton-sfc.ac.uk> wrote:

> No mention of metadata or entityId as far as I can see.

I'm learning that what's normal for InCommon community deployers is new knowledge for others, but I'm afraid the former is SOP for commercial services, SAML metadata is really not a common feature.

But to mock up the necessary metadata, you need the entityID, the ACS endpoint(s), and the key(s) (if any), and so they would have to document those. Note that if they don't have an entityID, they either call it an Audience value, or they have a bug. That bug may even be a security bug.

> Their support have no idea about Shibboleth and claim that I am the only customer that
> wants to use it. Am I getting stupider or, as far as their documentation goes, is it
> impossible to communicate with their SP?

That's an awful lot of chrome to build for something nobody uses, so I'm going with "they're wrong". In any case, you might want to ask the UK Fed help desk if they've run into it before.

In isolation, that UI looks pretty standard for this kind of service, and not having metadata is the norm, not the exception, but I couldn't create the metadata from that information alone, no.

-- Scott