Recommendations

• All Identity Providers and Service Providers that are able to use the Metadata Query Protocol (MDQ) shall use that protocol instead of downloading full metadata aggregates.
  • Point your SAML implementation MDQ base url against https://mds.swamid.se. Some implementations of MDQ may need to use the base url https://mds.swamid.se/entitites/ instead.
• Service Providers (SP) that can't use the MDQ service should use the swamid-idp-transitive metadata feed:
  • https://mds.swamid.se/md/swamid-idp-transitive.xml
  • A service that must limit Identity Providers to those only registered in SWAMID shall use the swamid-idp metadata feed:
    
    • https://mds.swamid.se/md/swamid-idp.xml
• Identity Providers that can't use the MDQ service use the swamid-sp-transitive metadata feed metadata feed:
  • https://mds.swamid.se/md/swamid-sp-transitive.xml