Shibboleth Developers

["Scott Cantor" <>]

> I see, so the metadata are read once and cached.  Is the only way to
> refresh the cache by restarting the SP server software?  What about on
> the IdP side?  Same thing?

No, it stats the file for changes and reloads on the fly. A cron job can
easily run metadatatool or siterefresh and grab the latest file, verify the
signature, and then replace the old copy. It decouples getting the data from
using it, which is much more robust.

A proper implementation would have to combine these strategies.

-- Scott