saml proxying scoped attributes...best practice

[Cantor, Scott]

> The MDQ is great for IdPs to fetch metadata for SPs on the
> fly, but the reverse isn't ideal. SPs need to know all IdP
> metadata up front in order to provide discovery and the
> MDQ doesn't really work for that.

There are other discovery solutions (SeamlessAccess) and there are ways to produce the discovery feed without using the SP itself. That particular model isn't viable, obviously, and it's not all that much more viable on the IdP than the SP, so proxying doesn't really solve that.

-- Scott