SAManage with Shibboleth 3?

[Cantor, Scott]

> Looking at the external doc you provided earlier, [1] I see that SP metadata
> can be retrieved via HTTPS.

With no expiration, so that's inherently unable to safely support revocation. And it likely won't be modified in a manner that allows a key change to happen safely, which defeats the purpose of doing it. I would never pull in a third party metadata source outside of InCommon or another similarly managed source, at least absent other assumptions that I have never seen a vendor meet.

-- Scott