Recommended or "Best" Practices for Shibboleth IdP?

[Donald Lohr]

So how do you handle "making" a vendor change their metadata to include 
a cert for signing and the validUntil setting, especially when your 
Senior management is dictating that a badly designed application be 
added to your Shibboleth service?


Thanks,
Don

On 9/30/20 7:06 PM, Cantor, Scott wrote:
> The lack of validUntil on the order of weeks, or a signature under a separate key, is instantly disqualifying for any source of metadata because there is no viable trust model without them.

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0