IdP metadata config docs

[Greg Haverkamp]

On Mon, Jun 11, 2018 at 7:53 AM Tom Scavo <trscavo at gmail.com> wrote:

>
> 2. Is anyone pulling metadata from a git server (such as GitHub)? If
> so, can you briefly describe your use case?


We do.

I guess the use case seems obvious to me, so hopefully I’m not being too
pedantic.  We keep the metadata in a git repository hosted on Bitbucket.
This allows us to hunt down errors, as well as to distribute updates
easily.  Our IdP’s do a pull from their remotes every 15 minutes.  So, we
can edit in our local repo, xmllint the metadata file, commit, and push.
Then we tell folks their service will be ready within 20 minutes.  (Up to
15 for the next pull, up to 5 for the IdP to refresh.)

An unintended plus is that it gives us a web XML editor for simple edits,
like adding ACS endpoints and the like.

Greg


>
> Your answers to these questions will help me write better documentation.
>
> Thanks,
>
> Tom
>
> [1] MetadataConfiguration https://wiki.shibboleth.net/confluence/x/8YAOAQ
> [2] MetadataManagementBestPractices
> https://wiki.shibboleth.net/confluence/x/JQXKAg
> [3] ResourceBackedMetadataProvider
> https://wiki.shibboleth.net/confluence/x/CAMnAQ
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180611/7fc69f5e/attachment.html>