What is the advice - meta data retrieval

[Rod Widdowson]

> However, only way they can access our IdP meta data is via a URL, no any other way

How very quaint.  Do they understand about metadata signing? I would imagine not.

This sounds like a business problem not a technical problem.  Business problems are rarely solved well (purely) by technology and I'm a techbnologist.

I'll leave it to others to describe what they have done in business terms when faced by such restrictions.

Rod