Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This document dates back to January 2013, when we were doing design for V3 of the Shibboleth Identity Provider. The Shibboleth MDA (Metadata Aggregator) was also being designed around the same time, and there seemed to be an opportunity to make use of the MDA within the IdP as part of its metadata processing system. In the end, we went in a different direction but the notes are preserved here.

This document is an informal input to the IdP V3 design discussions, not part of the process itself.  My suspicion is that to date most of the Shibboleth team have not spent much if any time with the MDA, and know little about it other than could be deduced from the name.  The purpose of this document is to give everyone enough understanding of the MDA code and the philosophy behind it to be able to make reasoned judgements about whether the MDA framework might be used as a component of the metadata handling design for the V3 IdP.

...

I think Chad and I saw this kind of pattern as useful because the MDA framework was designed to be extremely extensible.  It's relatively easy to gin up something, for example, that blacklists any entity with entityID containing "http://iay.org.uk" (e.g., using an XPathFilteringStage).  Similarly, inserting a fixed Irish flag logo into any entity whose MDRPI says its from the Irish registrar but which doesn't already have an MDUI logo defined is a pretty simple application of XSLTransformationStage.

...