Recommended Next steps...?

[Cantor, Scott]

Please stay on list.

> Hi Scott, I know that this is repeating my question

And I will repeat the answer. The Shibboleth IdP supports most of the behavior in the document because it is quite configurable and it's in Java so much easier to extend where necessary. Any code supporting attribute queries compliantly will work with the IdP.

The minor exception is we don't support the metadata extension that I designed at the time because our use cases never required it, the supported metadata role for an entity issuing queries is just SPSSODescriptor.

The SP does not support any of that material because that's not what it's for, it's an Apache/IIS module for supporting Browser SSO and ECP, and only supports queries in the context of SSO, not stand alone.

-- Scott