How to find SP Metadata / link to SP Metadata
peter.schober at univie.ac.at
Thu May 4 05:02:41 EDT 2017
* Netra Mirajkar <netrasm at gmail.com> [2017-05-04 09:47]:
> We have taken over management of Shibboleth SP which is already in working
> order for a customer. The customer wants to add another IDP and to work it
> properly we assume, we have to provide SP Metadata link. How can we figure
> out what it might be? Does Shibboleth store SP Metadata provided to other
> IDPs? It is configured with httpd if it helps.
The SP ships with a script that let's you easily create SAML 2.0
Metadata describing he SP.
On CentOS that's in /etc/shibboleth/metagen.sh by default,
on Debian and friends it's shib-metagen (in your $PATH).
Russ has written a man page for Debian, which may or may not be up to
date. You can find an online copy here:
There are two main reasons you don't want to provide the IDP with a
"link" to something automatically generated by the software: Trust
management and software configuration vs. metadata, cf.
More information about the users