Shibboleth Developers

[Tom Scavo <>]

On 11/4/05, Scott Cantor 
<>
 wrote:
> > Sorry, I should have told you what I'm trying to do.  I'm implementing
> > a name mapping plugin for emailAddress identifiers.  Rather than
> > require a Scope attribute in the <NameMapping> element, the thought is
> > to default to shibmd:Scope taken from IdP metadata.
>
> Meaning to figure out how to generate the email address domain? Well, again,
> I don't see a huge difference between these options.
>
> I think people have this all backwards. The goal shouldn't be to use the
> metadata to configure yourself, it should be to *generate* the metadata from
> the configuration.

You're right of course, so let me ask a different question.  If we had
an automatic metadata generator, where would it get its scope value?

A beta version of a metadata generator is floating around somewhere,
and if I recall, it computes its scope value as the tail of KeyName. 
So in that case, the metadata IS the authoritative source, right?

Tom