Need Assistance on Releasing Attribute to SP who is part of InCommon

[Tom Scavo]

On Tue, Mar 7, 2017 at 11:44 AM, Edward Patri <Edward.Patri at csi.cuny.edu> wrote:
>
> <MetadataProvider id="ICMD" xsi:type="FileBackedHTTPMetadataProvider"
> xmlns="urn:mace:shibboleth:2.0:metadata"
>
> metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
>                   minRefreshDelay="PT5M"
>                   maxRefreshDelay="PT1H"
>                   refreshDelayFactor="0.75"
>                   backingFile="C:\Program Files
> (x86)\Shibboleth\IdP\metadata\InCommon-metadata.xml"/>

If that's all there is to your MetadataProvider, then that is
insecure. See this wiki page for a secure metadata configuration that
verifies the signature on the file and validates the validUntil
expiration date: https://spaces.internet2.edu/x/XAQjAQ

Tom