<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>Another in a long series of really, really simple questions, I'm afraid... RTFM is a totally valid response, if you can point me to the right FM - I've googled around for an hour or two without finding an answer. I think my question is so basic the answer
hasn't been documented.</div>
<div><br>
</div>
<div>Does an IDP get my SP's metadata from an InCommon metadata provider, or does the IDP get the metadata directly from my SP?</div>
<div><br>
</div>
<div>I want to publish new metadata for my SP with InCommon. InCommon has three possible metadata aggregates - production, fallback, and preview. I would like to test my metadata before I push it into the production aggregate.</div>
<div><br>
</div>
<div>Is the proper procedure to publish the metadata into the preview aggregate, and then set my SP's shibboleth2.xml configuration to use the preview metadata provider? Perhaps with a nice short refresh interval to ensure that I'm reading in the new data before
I start testing? If the IDP is getting my SP's metadata directly from my SP, then that should do it. But if the IDP is getting my SP's metadata from InCommon, then I'll need to get the IDP to change to the preview aggregate as well, right?</div>
<div><br>
</div>
<div>I did review the IDP metadata provider documentation at <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider</a>, and looked at some examples of IDP
metadata such as <span style="color: rgb(0, 51, 102); font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; line-height: 20px; text-align: left; white-space: nowrap; background-color: rgb(255, 255, 255); ">"</span><a href="http://metadata.ukfederation.org.uk/ukfederation-metadata.xml" ?="" style="color: rgb(50, 96, 186); text-decoration: none; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; background-color: rgb(255, 255, 255); border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 20px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; min-height: inherit !important; white-space: nowrap; ">http://metadata.ukfederation.org.uk/ukfederation-metadata.xml"</a>.
It seems to be completely separate from SP metadata, so I'm inclined to guess that if I point my SP at the preview metadata and then attempt to log in using any of my federated IDPs, I'll be conducting a valid test. Is my guess correct?</div>
<div><br>
</div>
<div>--Ken</div>
<div><br>
</div>
<div>
<div>
<div style="font-family: Consolas; font-size: medium; ">------------------------------------------------------------</div>
<div style="font-family: Consolas; font-size: medium; ">Ken Weiss <a href="mailto:ken.weiss@ucop.edu">ken.weiss@ucop.edu</a></div>
<div style="font-family: Consolas; font-size: medium; ">UC Office of the President 510-587-6311 (office)</div>
<div style="font-family: Consolas; font-size: medium; ">California Digital Library 916-905-6933 (mobile)</div>
<div style="font-family: Consolas; font-size: medium; ">UC Curation Center</div>
<div style="font-family: Consolas; font-size: medium; ">415 20th Street, 4th Floor</div>
<div style="font-family: Consolas; font-size: medium; ">Oakland, CA 94612</div>
</div>
<div><br>
</div>
</div>
</div>
<div><br>
</div>
</body>
</html>