Recommendations

• All Identity Providers and Service Providers that are able to use the Metadata Query Protocol (MDQ) shall use that protocol instead of downloading full metadata aggregates.
  • Point your SAML implementation MDQ base url against https://mds.swamid.se. Some implementations of MDQ may need to use the base url https://mds.swamid.se/entitites/ instead.
• Service Providers (SP) that can't use the MDQ service should SP SHOULD use the swamid-idp-transitive metadata feed:
  • https://mds.swamid.se/md/swamid-idp-transitive.xml
  • A service that must limit Identity Providers to those only registered in SWAMID shall use the swamid-idp metadata feed:
    
    • https://mds.swamid.se/md/swamid-idp.
  Green lines in the picture on the left represent the recommended choices for Service Providers (left) and Identity Providers (right).
  • • xml
• Identity Providers that can't use the MDQ service use the swamid-sp-transitive metadata feed metadata feed:
  • https://mds.swamid.se/md/swamid-sp-transitive.xml