...
Regardless of your software implementation, however, you can always set up a cron job to refresh metadata, but in that case you will need additional tools to verify the XML signature at the time of refresh and check the validUntil attribute as noted above. Participants are encouraged to share such tools and scripts for the benefit of the community. For instance, third-party tools that make InCommon metadata usable with Microsoft AD FS are documented elsewhere in this wiki.
| Anchor | ||||
|---|---|---|---|---|
|
Firewall Configuration
Depending on your environment, you may have to poke a hole in an outbound firewall to allow your metadata client to reach the metadata server. In that case, you will actually want to poke two holes in that firewall since there are two metadata servers as described below.
...