LocalDynamicMetadataProvider at the SP

Nate Klingenstein ndk at signet.id
Thu Aug 8 03:14:26 EDT 2019


Martin,

> Actually, to turn your question around, what is the use case for
> LocalDynamic at the SP?

It's been utterly invaluable for SAMLtest, at least.  I think the general use case was for handling folders with large numbers of local metadata files, as are accruing all over the place with non-Shibboleth implementations of SAML proliferating.  Also, read the little bulletin on this Wiki page to see why it's so much better than the FolderMetadataProvider.

https://wiki.shibboleth.net/confluence/display/SP3/FolderMetadataProvider

> If discovery is done by another (central) DS,
> why not consume metadata from the respective federation?

That would be MDQ.

https://wiki.shibboleth.net/confluence/display/SP3/MDQMetadataProvider

> And if discovery is somehow static (WAYFless URLs, etc), why this dynamic feature?

Lookup of the IdP once the assertion comes back.

Best wishes always,
Nate.


More information about the users mailing list