Metadata

[Cantor, Scott]

On 6/21/17, 3:49 PM, "users on behalf of Cheltenham, Chris" <users-bounces at shibboleth.net on behalf of ccheltenham-ext at philasd.org> wrote:

> I have a vendor as an SP who has their entity ID pointing to a metadata xml file.
>
> She insists that is correct.

It's not correct or incorrect. It is a compliant entityID. It's not terribly "wise" but it is supported by a lot of folk wisdom and never-deployed standards around how people should exchange metadata, combined with laziness when it comes to simply configuring a redirect. It has no operational significance to modern software that it resolve that way.
 
> Is that a proper way to set your entity id.

The proper way is to pick a name that logically means something clear and has no reason to ever change short of a company selling off its domain. A URL to a file doesn't really meet that criteria but it doesn't exactly not meet it unless they go and change it on the premise that they moved the file so naturally the ID should change. Which if I were to place a bet...
 
It's a sign of a future mistake being likely more than a bad practice in and of itself.

-- Scott