<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Actually, I suppose, as we’re writing the install scripts we can just grab the IdP metada and stick on the SP as they spin up. And we can script any midifications
ot the SP data from info collected in the install process.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><br>
<b>Subject:</b> Re: metadata generation<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:11.5pt;font-family:"Calibri","sans-serif";color:#1F497D">So I should, for the IdP, create a location that just has a build MD file and have the SP’s grab that as they spin up?</span><o:p></o:p></p>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I would ask SP's to supply metadata to you. If they are not super technical, consider pulling their metadata from their /Shibboleth.sso/Metadata handlers as they register with you and using that as the basis for a pile-of-SP's metadata
file on the IdP node. You could host it for everyone but only the IdP needs to load it.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">all-the-pretty-things.xml:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><EntitiesDecriptor Name="allThePrettyThings"><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <EntityDescriptor id="SP1" /><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"> <EntityDescriptor id="SP2" /><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"> <EntityDescriptor id="SP3" /><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"></EntitiesDescriptor><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">/shibboleth-idp/conf/relying-party.xml:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><MetadataProvider id="allThePrettyThings" xsi:type="FilesystemMetadataProvider" metadataFile="/path/to/all-the-pretty-things.xml" /><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">There are multiple ways to manage this, from shell scripts or XSLT operating on folders of metadata files to vi to full-blown federation management GUI's with workflows. If this will not change much and you know XML syntax, vi will be
fastest.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:11.5pt;font-family:"Calibri","sans-serif";color:#1F497D">I guess my next question is, and I haven’t read all the helpful links sent to me yet, is what, if any, are the security ramifications of allowing essentially
open access to the metadata file?</span><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">"Open access"? Really bad.<o:p></o:p></p>
</div>
</div>
</body>
</html>