[EXTERNAL] Re: saml proxying scoped attributes...best practice

[Bobby Lawrence]

I guess I need to investigate other discovery services…I’ve only been using the embedded discovery service which queries the SP itself for the metadata

From: Alan Buxey <alan.buxey at myunidays.com>
Sent: Wednesday, November 13, 2024 10:04 AM
To: Bobby Lawrence <robertl at jlab.org>
Cc: Shib Users <users at shibboleth.net>; Cantor, Scott <cantor.2 at osu.edu>
Subject: Re: [EXTERNAL] Re: saml proxying scoped attributes...best practice

hi,

Correct me if I’m wrong, but the MQD aggregate of IdP-only metadata is effectively the same as the legacy variant…the result is a rather large XML file to load.

that is correct - but its downloaded a lot quicker - and, as said, you dont need to use that on the SAML SP itself , let the SP use the MDQ protocol and grab IdPs on demand,  use the very large XML file in the backend systems that provide the discovery or the 'we work with this IdP' part

alan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241113/d6f798fb/attachment.htm>