InCommon metadata support

["Cantor, Scott" <>]

> I'm not sure what / if anything else we need to do. I've been browsing the
> site for weeks and have come across information regarding Refresh and
> signing policies which differ from our current configuration.

Without knowing what you're doing that's different or why, that's not really 
something one could comment on. Other than refresh periodicity, most of the 
rest isn't really all that "negotiable" though, there are things one does and 
if you don't do them you have a security flaw, but they aren't really that 
variable in form. Validate with the right key and enforce a validUntil 
constraint, and that's about it.

-- Scott