[EXTERNAL] Re: saml proxying scoped attributes...best practice

Alan Buxey alan.buxey at myunidays.com
Wed Nov 13 15:04:11 UTC 2024


hi,

Correct me if I’m wrong, but the MQD aggregate of IdP-only metadata is
> effectively the same as the legacy variant…the result is a rather large XML
> file to load.
>

that is correct - but its downloaded a lot quicker - and, as said, you
dont need to use that on the SAML SP itself , let the SP use the MDQ
protocol and grab IdPs on demand,  use the very large XML file in the
backend systems that provide the discovery or the 'we work with this IdP'
part

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241113/11c37a2e/attachment.htm>


More information about the users mailing list