The EntityRoleWhiteList saves memory by only loading metadata from SAML roles that the IdP needs to interoperate with. -->
<!-- --> ← コメントアウト解除
<MetadataProvider id="HTTPMetadata"
xsi:type="FileBackedHTTPMetadataProvider"
backingFile="%{idp.home}/metadata/gakunin-metadata-backing.xml"
metadataURL="https://ex-ds.gakunin.nii.ac.jp/fed/ex-fed-metadata.xml" failFastInitialization="false">
<MetadataFilter xsi:type="SignatureValidation" certificateFile="%{idp.home}/credentials/ex-fed.crt" /> <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P15D"/> ↑「30」から、「15」に変更 <MetadataFilter xsi:type="EntityRoleWhiteListEntityRole"> <RetainedRole>md:SPSSODescriptor</RetainedRole> </MetadataFilter> </MetadataProvider>
<!-- --> ← コメントアウト解除
|