<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div><blockquote type="cite" class=""><div class="">On 17 Apr 2019, at 06:05, Richard Levenberg <<a href="mailto:richardl@ufp.com" class="">richardl@ufp.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">What is the suggested mechanism by which IdP metadata is signed<br class=""></div></div></blockquote><div><br class=""></div><div>Signing metadata is most often seen in the context of a third-party trust broker such as a federation like the UK federation or InCommon. There's not much reason to sign metadata yourself outside that kind of context: for example, if you're supplying metadata to a bilateral partner then you can just send them a file.</div><div><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div class="">dynamically reflect the IdP's configuration?<br class=""></div></div></blockquote><div><br class=""></div><div>In the case where you're working with a federation to publish your metadata to other federation members, that varies a lot and depends on the specific federation's registration processes and tools. It might be a question of exchanging mail with the federation operator, or it might involve some sort of web application you log into.</div><div><br class=""></div><div>If you are not working with a federation, you probably just edit the file to include the changes you want. The IdP has no automation for this.</div><div><br class=""></div><div>Hope this helps,</div><div><br class=""></div></div><div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div class=""> -- Ian<br class=""></div><div class=""><span class="Apple-style-span" style="font-size: medium;"><br class=""></span></div></span></div></span><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>