IDP Metadata Binding order

Peter Schober peter.schober at univie.ac.at
Mon Oct 23 10:02:37 UTC 2023


José Ramalho <jramalho at ua.pt> [2023-10-22 21:32 CEST]:
> For my surprise, the validation failed because my
> SingleSignOnService Bindings are declared before the
> SingleLogoutService Binding.
> In terms of SAML is this order relevant?

This page hasn't been updated for a decade but should still apply:
https://shibboleth.atlassian.net/wiki/spaces/CONCEPT/pages/928645443/MetadataCorrectness

I.e., to validate you can use XmlSecTool from the Shibboleth project
https://shibboleth.atlassian.net/wiki/spaces/XSTJ3/overview
(or alternatively xmllint from libxml)
together with a local copy of the "hacked" schema collection from the
UKfederation, https://github.com/ukf/ukf-meta/tree/master/mdx/schema

-peter


More information about the users mailing list