[EXTERNAL] Re: saml proxying scoped attributes...best practice

Cantor, Scott cantor.2 at osu.edu
Wed Nov 13 15:27:59 UTC 2024


> I guess I need to investigate other discovery services…I’ve
> only been using the embedded discovery service which
> queries the SP itself for the metadata 

It *can*, but all it wants is the JSON, it doesn't care where it comes from.

There are other ways to produce it. Ian threw an MDA appliance thing together for me years ago that could do it, we're talking about possibly reviving that. Either way, the IdP isn't going to go back to loading 3G of metadata just to spit out that JSON so once the SP is replaced we have to come up with something else.

XSLT could do it, and a streaming parser producing JSON out is another option.

I asked Internet2 a while back to consider producing a feed of it alongside the XML too. Me alone asking when I have nothing that needs it isn't going to take the conversation far.

-- Scott




More information about the users mailing list