Metadata Administration

This page is for site administrators responsible for creating and maintaining SAML metadata on behalf of their organization.

The metadata submitted by the site administrator is vetted and approved by the InCommon Registration Authority (RA). Since the SAML protocol depends on the proper use of metadata, the RA checks the correctness and integrity of what is submitted by the site administrator. In particular, the RA checks that the entity ID and endpoints in metadata meet certain basic requirements.

InCommon also incorporates metadata administered by other federations.  See Interfederation and eduGAIN for more information.

Federation Manager

A web interface called the Federation Manager is used to administer InCommon metadata. The interface supports both IdP and SP metadata. The elements of each are referenced in the following sections.

IdP Metadata Elements

The following elements are called out in IdP metadata.

• Entity ID
  • Entity Attributes
• Scope
• X.509 Certificates
  • Key Usage
  • IdP Key Handling
  • Certificate Migration
    • Migrating a Certificate in IdP Metadata
• User Interface Elements
  • UI Elements in IdP Metadata
• Error Handling URL
• SAML Protocol Endpoints
  • Endpoints in IdP Metadata
• Contacts

For IdP deployments based on the Shibboleth software, there is valuable information in the Shibboleth wiki regarding metadata for the Shibboleth IdP.

For a discussion of the desirability of registering test IdPs in metadata, see Test IdPs in Metadata.

SP Metadata Elements

The following elements are called out in SP metadata.

• Entity ID
  • Entity Attributes
• X.509 Certificates
  • Key Usage
  • Certificate Migration
    • Migrating a Certificate in SP Metadata
• User Interface Elements
  • UI Elements in SP Metadata
• Requested Attributes
• SAML Protocol Endpoints
  • Endpoints in SP Metadata
• Contacts

For SP deployments based on the Shibboleth software, there is valuable information in the Shibboleth wiki regarding metadata for the Shibboleth SP.