InCommon metadata support

["Wessel, Keith" <>]

Thanks, Scott. It's that reasonable amount of risk balanced with good timeout 
values that I had in mind when I mentioned adding the MDQ server to our 
production IDP. I'll give it some thought.

Thanks to everyone for thoughts on this. I'd like to do my part to help 
InCommon with this pilot if I can, so the thoughts are appreciated.

Keith


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Cantor, Scott
Sent: Wednesday, March 02, 2016 3:42 PM
To: 

Subject: Re: [Metadata-Support] How to test the per-entity metadata server 
from an IDP

On 3/2/16, 4:13 PM, 
"
 on behalf of Tom Scavo" 
<
 on behalf of 
>
 wrote:


>
>Yes, I did understand your point, but the main reason I pushed back is
>that the above strategy may not be the best strategy---heck, it may
>not even be a good strategy---so I think we need to step back and take
>stock. (Btw, you're not the first one to contemplate such a
>configuration, so you're in good company :)

I can't really imagine any other way to put it under some stress without 
risk. Assuming appropriate timeouts, it's got to be fairly reasonable.

>When in doubt, do what Scott does :-) That is, identify one or more
>SPs under your control (as SP owner, not Site Administrator) that will
>tolerate a switch to mdq-beta. I'll let Scott describe what he does on
>shibboleth.net (although I think he may have already let the cat out
>of the bag).

Well, SP's are harder if they need discovery, since you're stuck loading the 
aggregate regardless, but the logs don't suggest we've had any trouble with 
using the MDQ server as the primary for metadata lookup.

-- Scott