Shibboleth Developers

["Scott Cantor" <>]

> Right, I see what you're saying, but the EntitiesDescriptor wouldn't
> be complete without schemaLocation so that would have to be added
> after the fact.

No, it doesn't. schemaLocation is not required in XML and is ignorable even
if it's present.

> Also, what about the Name attribute?  That also needs
> to be added after the fact, and the IdP config file needs to be
> adjusted accordingly.  All in all, it seems the EntitiesDescriptor
> element is more trouble than it's worth.

I agree, in this case, that's why I said not to use it. Maybe you
misunderstood me?

> 
> For what this tool will be used for, shouldn't the EntityDescriptor be
> signed (and not EntitiesDescriptor)?  As Nate notes, every time you
> add an EntityDescriptor to a signed EntitiesDescriptor, you have to
> resign.

Umm, I think we're talking past each other.

-- Scott