Recommendations

• All Identity Providers and Service Providers that are able to use the Metadata Query Protocol (MDQ) shall use that protocol instead of downloading metadata aggregates.
  • Point your SAML implementation MDQ base url against https://mds.swamid.se/.
• Service Providers (SP) that can't use the MDQ service should use the swamid-idp-transitive metadata feed:
  • https://mds.swamid.se/md/swamid
  SP SHOULD use the swamid
  • -idp-transitive.xml
  • A service that must limit Identity Providers to those only registered in SWAMID can use the swamid-idp metadata feed:
    
    • https://mds.swamid.
  Green lines in the picture on the left represent the recommended choices for Service Providers (left) and Identity Providers (right).
  • • se/md/swamid-idp.xml
• Identity Providers that can't use the MDQ service use the swamid-sp-transitive metadata feed metadata feed:
  • https://mds.swamid.se/md/swamid-sp-transitive.xml