Shibboleth Developers

[Tom Scavo <>]

On 8/10/05, Scott Cantor 
<>
 wrote:
> 
> I think the idea here would be to say "just give this to your partner so he
> can add the file in as a MetadataProvider" rather than dealing with the
> EntitiesDescriptor idea. People can come to figure that in some other way.

Right, I see what you're saying, but the EntitiesDescriptor wouldn't
be complete without schemaLocation so that would have to be added
after the fact.  Also, what about the Name attribute?  That also needs
to be added after the fact, and the IdP config file needs to be
adjusted accordingly.  All in all, it seems the EntitiesDescriptor
element is more trouble than it's worth.

> You could maybe provide a pointer to instructions in the Wiki (yet to be
> written ;-) on how to sign the file with metadatatool...

For what this tool will be used for, shouldn't the EntityDescriptor be
signed (and not EntitiesDescriptor)?  As Nate notes, every time you
add an EntityDescriptor to a signed EntitiesDescriptor, you have to
resign.

I think adding an EntitiesDescriptor element is a mistake, but maybe
I'm not understanding all the uses of this tool.

Tom