Configuring Shibboleth v3 IdP for Unsolicited SSO (IdP Initiated SSO)

[Nate Klingenstein]

Tim,

> So, where do I load the metadata? I have a copy of it in %idphome%\metadata in a file named "vendorname.xml"

You have several options.  You can append it to a file that contains a generic pool of external vendors, or you can just load it precisely as you describe below.  Place it next to the other MetadataProvider elements in your configuration.

I've personally found it easier to just leave them separated.

> So I assume that now I have to also add an entry in metadata-providers.xml for the vendor as a FileSystemMetadataProvider and then re-start the service to reload the metadata?

Yes, you need to add that entry as that type with the right path.  You can restart just the shibboleth.MetadataResolverService using the admin tool interface:

https://wiki.shibboleth.net/confluence/display/IDP30/ReloadableServices

or you can just restart the servlet container.

Take care,
Nate.