Question about TransportOption behavior

Cantor, Scott cantor.2 at osu.edu
Wed Sep 13 12:16:21 UTC 2023


> An SP connecting to multiple IDPs is not uncommon at all. ;)
> It's the fact that it needs to establish trust with each IDP
> bilaterally (by means of separate MetadataProviders) that is,
> compared to getting all those IDPs' metadata from a single
> MetadataProvider (e.g. InCommon).

Even that's rare, but since bilateral trust is almost universally not managed properly, the only safe way to do it is statically/manually, in which case the metadata is just local in a batch or directory, no need for multiple MetadataProviders.

-- Scott




More information about the users mailing list