hypothetical per-entity metadata question

[Cantor, Scott]

On 1/23/19, 3:35 PM, "users on behalf of Jerry Shipman" <users-bounces at shibboleth.net on behalf of jes59 at cornell.edu> wrote:

>  (Or am I just completely misunderstanding how it works? I didn't do the homework.)

I suppose I would say that the homework is [1] and there's no substitute for testing and tuning until you get acceptable results or decide that you can't live with the risks. I assume by now the UK Fed might have recommendations on configuration for their service and that's the only one in production anywhere that I know of.

There are a lot of caching and redundancy approaches and settings, both internal to the plugin and by chaining local and remote sources in all kinds of ways. An approach as simple as a cron job downloading high value fragments into a LocalDynamic provider as a backstop for a remote provider is probably trivial to set up and a lot less work than implementing a caching local proxy, but that isn't all that hard either.

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/IDP30/DynamicHTTPMetadataProvider