<div dir="ltr">We do pretty much the same thing. The default relying-party entry is setup such that 99% of the SPs we federate with will be handled how we want them to. The other 1% get their own entries & that's only because they're generally vendors which have some problems with encrypted assertions/attributes and/or signatures. I'll maybe touch relying-party.xml once a year, if that.<div>
<br></div><div>Dave</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 8, 2013 at 11:09 AM, David Bantz <span dir="ltr"><<a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Your elaboration on this recommended practice would be appreciated Peter.<br>
<span class="HOEnZb"><font color="#888888"><br>
David Bantz<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
On Thu, 8 Aug 2013, at 01:20 , Peter Schober <<a href="mailto:peter.schober@univie.ac.at">peter.schober@univie.ac.at</a>> wrote:<br>
<br>
> * Nate Klingenstein <<a href="mailto:ndk@internet2.edu">ndk@internet2.edu</a>> [2013-08-07 18:44]:<br>
>>> Whenever I make a change in config files (relying-party or<br>
>> attribute-Resolver), I have to do a tomcat restart to reload the<br>
>> files. Is there any way, it can do a auto reload?<br>
>><br>
>> Generally, yes.<br>
>><br>
>> <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigConfig" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigConfig</a><br>
><br>
> Even better: Change your config/thinking in a way that it does not<br>
> require changes to relying-party.xml.<br>
><br>
> (Reloading the resolver once in a while and reloading the filter more<br>
> often seems fine, until a time we rely on metadata alone for attribute<br>
> release.)<br>
> -peter<br>
> --<br>
> To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
<br>
</div></div><br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br>David Langenberg<div>Identity & Access Management</div>
<div>The University of Chicago</div>
</div>