...
| Code Block |
|---|
|
<!-- SWAMID MDQ METADATA PROVIDER -->
<MetadataProvider id="DynamicEntityMetadata" xsi:type="DynamicHTTPMetadataProvider"
connectionRequestTimeout="PT2S"
connectionTimeout="PT2S"
socketTimeout="PT4S">
<MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true"
certificateFile="%{idp.home}/credentials/smdmd-signer2.crt" />
<MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P14D"/>
<MetadataQueryProtocol>https://mds.swamid.se/</MetadataQueryProtocol>
</MetadataProvider> |
...
| Code Block |
|---|
|
<!-- SWAMID 2.0 METADATA PROVIDER -->
<MetadataProvider id="Swamid2MD" xsi:type="FileBackedHTTPMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
metadataURL="httphttps://mds.swamid.se/entities/md/swamid-2.0.xml"
backingFile="%{idp.home}/metadata/swamid-2.0.xml">
<MetadataFilter xsi:type="SignatureValidation" requireSignedMetadata="true"
certificateFile="%{idp.home}/credentials/md-signer2.crt" />
<MetadataFilter xsi:type="EntityRoleWhiteList">
<RetainedRole>md:SPSSODescriptor</RetainedRole>
</MetadataFilter>
</MetadataProvider> |
Hämta och använda metadata från SWAMIDs testfederation
| Info |
|---|
Använd endast denna konfiguration om du planerar att registrera din IdP i SWAMIDs testfederation. |
Vid behov så kan även metadata för SWAMIDs testfederation läggas till för att tillåta realistiska tester för ej driftsatta tjänsteleverantörer (SP):
| Code Block |
|---|
|
<!-- SWAMID TEST METADATA PROVIDER -->
<MetadataProvider id="Swamid2MD" xsi:type="FileBackedHTTPMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
metadataURL="http://md.swamid.se/md/swamid-testing-1.0.xml"
backingFile="%{idp.home}/metadata/swamid-testing-1.0.xml">
<MetadataFilter xsi:type="SignatureValidation" requireSignedMetadata="true"
certificateFile="%{idp.home}/credentials/md-signer2.crt" />
<MetadataFilter xsi:type="EntityRoleWhiteList">
<RetainedRole>md:SPSSODescriptor</RetainedRole>
</MetadataFilter>
</MetadataProvider>
|