Here is a list of other federated single sign-on software that is known to work with the MDQ protocol:

• SimpleSAMLPHP
  • See general documentation: https://simplesamlphp.org/docs/stable/index.html
  • Automated metadata management: https://simplesamlphp.org/docs/contrib_modules/metarefresh/simplesamlphp-automated_metadata.html
• SATOSA
  • See general documentation: https://github.com/IdentityPython/SATOSA
  • SATOSA is built on pysaml2 which provides a configuration example here for using MDQ: https://github.com/IdentityPython/pysaml2/blob/master/docs/howto/config.rst#metadata

For all other identity providers, service providers or discovery services, please contact your vendor. If you want to ask a vendor to implement the MDQ protocol, you can refer them to this documentation. Remember that aggregates are still available through the per-entity metadata distribution service if your vendor does not support MDQ.

Get the metadata signing key

Download and place the production signing key in the credentials folder of the IdP and name it inc-md-cert-mdq.pem.