Shibboleth Developers

["Scott Cantor" <>]

> Would it be possible to add this feature to Shibboleth
> distribution? As far as I understand, it only requires
> a new optional element to the XML schema of sites.xml.
> Then the origin administrators could use the element
> in sites.xml instead of our centralized server.

The old metadata format is a legacy at this point, there won't be any
further development or additions to it.

There are plenty of ways to extend SAML metadata with this sort of thing.
OrganizationURL would be one, but doesn't have any real meaning behind it
(it would be up to the organization to actually make the policy available
using that URL).

Couldn't P3P figure in here somewhere, though? Like a lot of things that
failed on the client, maybe it makes more sense as a server-side
interaction.

-- Scott