validate certificate of service provider

[Peter Schober]

* Martin Lunze <martin.lunze at tu-dresden.de> [2019-07-02 08:09]:
> But i did not find an idea in the documentation how to implement this.

I understood this to be your main question -- how to implement a
different trust model NOT based on MetaIOP[1] using the Shibboleth
software.
(I don't know the answer and have no intention of doing something
myself but wanted to clarify since the answers so far just summarized
that the software worked differently.)

-peter

[1] https://wiki.oasis-open.org/security/SAML2MetadataIOP