> Is it possible to have the service provider retrieve the IdP metadata from a > client-authenticated server? Never tested and certainly inadvised, but [1], TransportOption. -- Scott [1] https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMetadataProvider#NativeSPMetadataProvider-XMLMetadataProvider