Shibboleth Developers

["Scott Cantor" <>]

> You're right of course, so let me ask a different question.  If we had
> an automatic metadata generator, where would it get its scope value?

If I was actually going to try and generate it from the configuration, I
suppose all one could do is get it from resolver.xml. That's hardly perfect,
but this scope stuff is really vague. I invented it out of whole cloth.

I think it would have to be recognized in some more formal way to do
anything better than that.

> A beta version of a metadata generator is floating around somewhere,
> and if I recall, it computes its scope value as the tail of KeyName. 
> So in that case, the metadata IS the authoritative source, right?

No, I think the generator just asks up front "what is your subdomain?" and
uses that. I don't think it's related to any of the hostnames, but if it
was, it would be more accurate to say that the KeyName and locations come
from a common starting point, and maybe the scope could as well. But I think
it's a separate input element right now.

-- Scott