configuring shibboleth on AWS using ELB

Deirdre Kirmis Deirdre.Kirmis at
Wed Nov 27 14:13:32 EST 2019

Eventually, we will want to set up as a federation SP, but this is just dev at this point, so we are only configuring our org IDP. 
I did find the documentation on creating the metadata schema/rules, so thanks for that direction. 

Deirdre Kirmis
Technology Services
Arizona State University Library

-----Original Message-----
From: users <users-bounces at> On Behalf Of Cantor, Scott
Sent: Wednesday, November 27, 2019 10:39 AM
To: Shib Users <users at>
Subject: Re: configuring shibboleth on AWS using ELB

On 11/27/19, 12:23 PM, "users on behalf of Deirdre Kirmis" <users-bounces at on behalf of Deirdre.Kirmis at> wrote:

> How do I prepare the metadata myself?

It's an XML file with a very defined schema and set of rules for what's in it, but that's probably obvious so the intent of the question is not 100% clear.

Speaking in general terms, a federated SP (that is, one dealing with many IdPs of different organizations) really needs to be in a federation, and federations provide metadata management systems generally, though not always.

An enterprise SP is dealing with a single IdP and the IdP operator should be providing processes to follow. For myself, I don't ask SPs to give me metadata as a rule, I just expect them to inform me of the keys and hosts through a registration process, then I assign them entityID(s) to use, and I have processes to follow when changes are needed.
-- Scott

For Consortium Member technical support, see 
To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list