InCommon MDQ

[Cantor, Scott]

On 7/6/20, 7:18 PM, "users on behalf of Lohr, Donald - lohrda" <users-bounces at shibboleth.net on behalf of lohrda at jmu.edu> wrote:

> Are you referring to: LocalDynamicMetadataProvider

Yes, that's what he's talking about. The other options are all historical at this point. Filesystem sources are useful when metadata is scripted or provided by some other system. Very rarely there may be use in the old HTTP sourcing option if somebody on campus is maintaining their own metadata feeds.

Otherwise the two dynamic providers are all that matter now. Federations support MDQ and for everything else you dump each SP in a file named for SHA1(entityID) and load it all with LocalDynamic.

e.g. in .bashrc...

dynmd() { echo "/home/shibboleth/idp/metadata/dynamic/`echo -n \"$1\" | sha1sum | awk '{print $1}'`.xml"; }
vimd() { vi `dynmd $1`; }

$ cp some_example_metadata.xml `dynmd https://sp.example.org/sp`
$ vimd https://sp.example.org/sp

-- Scott