Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The InCommon Export Aggregate

InCommon maintains an Export Aggregate for the purposes of interfederation:

...

In terms of content, the Export Aggregate is a proper subset of the Main Aggregate. For more information about the various metadata aggregates used in the InCommon Federation, see the Metadata Aggregates parent topic.

...

...

languagebash

...

# InCommon export aggregate distribution point
$ MD_LOCATION=http://md.incommon.org/InCommon/InCommon-metadata-export.xml

# Fetch the metadata and list the entityIDs of exported entity descriptors
$ MD_PATH=/tmp/InCommon-metadata-export.xml
$ curl --silent $MD_LOCATION \
    | tee $MD_PATH \
    | grep -F ' entityID=' \
    | sed 's/^.* entityID="\([^"]*\).*$/\1/'

End entities typically do not consume the Export Aggregate, which is intended for other federations and aggregation services such as eduGAIN. In any case, the Export Aggregate is signed with the same metadata signing key used to sign other InCommon aggregates. To verify the signature on the metadata, a consumer must obtain an authentic copy of the InCommon Metadata Signing Certificate.

Including Your Metadata in the Export Aggregate

Entity metadata is included in the Export Aggregate subject to the following policy:

...

Info
titleFull eduGAIN participation begins on February 15, 2016
InCommon Operations will begin exporting metadata at scale on February 15, 2016. At that time, all IdP metadata will be exported by default. All SPs that have explicitly opted in will be exported as well. Site Administrators choose whether or not to export metadata via the Federation Manager.
Code Block
languagebash
# InCommon export aggregate distribution point
$ MD_LOCATION=http://md.incommon.org/InCommon/InCommon-metadata-export.xml

# Fetch the metadata and list the entityIDs of exported entity descriptors
$ MD_PATH=/tmp/InCommon-metadata-export.xml
$ curl --silent $MD_LOCATION \
    | tee $MD_PATH \
    | grep -F ' entityID=' \
    | sed 's/^.* entityID="\([^"]*\).*$/\1/'