InCommon metadata support

["Klingenstein, Nate" <>]

A lot of these possible checks revolve around domains rather than entities.  I would personally be thrilled if I could be alerted any time a calstate.edu endpoint were registered in metadata outside our account, but InCommon's model for domain ownership is allowing an entity to assert control of a domain(e.g. scopes), not so much the other way around.

It's not as though InCommon can't validate domains, though(Certificate Service being the obvious example).  I feel like a lot of unique synergies could be built by aligning InCommon services more closely without impinging too much on Oracle and Microsoft's "turf".

It's definitely worth asking,

Nate.

---

From: <> on behalf of Tom Poage <>
Sent: Wednesday, January 10, 2018 3:50:25 PM
To:
Subject: [Metadata-Support] Metadata checks

 

Q: Are checks performed on metadata submissions documented where e.g. Site Admins can (re)view them?

Probably an off case, but a vendor registered a new instance of their application for us into InCommon and inadvertently used another school's ACS URL. Given (what I think are) the several cases where SP ACS URLs span several domains, I imagine a consistency/sanity check on ACS URLs is nigh on impossible.

Thanks!
Tom.