IDP Metadata Binding order
Peter Schober
peter.schober at univie.ac.at
Mon Oct 23 10:02:37 UTC 2023
José Ramalho <jramalho at ua.pt> [2023-10-22 21:32 CEST]:
> For my surprise, the validation failed because my
> SingleSignOnService Bindings are declared before the
> SingleLogoutService Binding.
> In terms of SAML is this order relevant?
This page hasn't been updated for a decade but should still apply:
https://shibboleth.atlassian.net/wiki/spaces/CONCEPT/pages/928645443/MetadataCorrectness
I.e., to validate you can use XmlSecTool from the Shibboleth project
https://shibboleth.atlassian.net/wiki/spaces/XSTJ3/overview
(or alternatively xmllint from libxml)
together with a local copy of the "hacked" schema collection from the
UKfederation, https://github.com/ukf/ukf-meta/tree/master/mdx/schema
-peter
More information about the users
mailing list