Page Comparison - Choosing the right SAML metadata URL (v.23 vs v.44) - SWAMID

...

12

Info

SWAMID publishes multiple metadata-streams. Choose the right metadata according to the following process.

Section

Column

width	50%

Gliffy Diagram

name

which-metadata

version

draw.io Diagram

Column

	width:49%
	width:49%

Recommendations

SP SHOULD

Identity Providers and Service Providers that are able to use the Metadata Query Protocol (MDQ) shall use that protocol instead of downloading metadata aggregates.
- Point your SAML implementation MDQ base url against https://mds.swamid.se/.
Service Providers (SP) that can't use the MDQ service should use the swamid-idp-transitive

.xml

Identity providers SHOULD use both swamid-2.0.xml and swamid-1.0.xml until SWAMID 1.0 has been fully deprecated.

Green lines in the picture on the left represent the recommended choices for Service Providers (left) and Identity Providers (right).

- A service that must limit Identity Providers to those only registered in SWAMID can use the swamid-idp metadata feed:
  - https://mds.swamid.se/md/swamid-idp.xml
Identity Providers that can't use the MDQ service use the swamid-sp-transitive metadata feed metadata feed:
- https://mds.swamid.se/md/swamid-sp-transitive.xml