<!-- ========================================== -->
<!-- Metadata Configuration -->
<!-- ========================================== -->
<snip>
<!-- Example metadata provider. -->
<!-- Reads metadata from a URL and store a backup copy on the file system. -->
<!-- Validates the signature of the metadata and filters out all by SP entities in order to save memory -->
<!-- To use: fill in 'metadataURL' and 'backingFile' properties on MetadataResource element -->
<!-- --> ←Add comment end
<metadata:MetadataProvider id="URLMD" xsi:type="metadata:FileBackedHTTPMetadataProvider"
metadataURL="http://sp.example.asia/metadata/sp-metadata.xml"
↑URL of SP metadata
backingFile="/opt/shibboleth-idp/metadata/sp-example-asia-metadata.xml">
↑backup file name of SP metadata
<!-- ← Add comment start
<metadata:MetadataFilter xsi:type="metadata:ChainingFilter">
<metadata:MetadataFilter xsi:type="metadata:RequiredValidUntil"
maxValidityInterval="P7D" />
<metadata:MetadataFilter xsi:type="metadata:SignatureValidation"
trustEngineRef="shibboleth.MetadataTrustEngine"
requireSignedMetadata="true" />
<metadata:MetadataFilter xsi:type="metadata:EntityRoleWhiteList">
<metadata:RetainedRole>samlmd:SPSSODescriptor</metadata:RetainedRole>
</metadata:MetadataFilter>
</metadata:MetadataFilter>
--> ←Add comment end
</metadata:MetadataProvider>
<!-- --> ← Add comment start | 