Question: Does the saml-sp plugin support metadata retrieval using MDQ?

[sgurnick]

I am running Craft 3.9.13 with saml-sp plugin 2.7.5.

I am using a Shibboleth Identity Provider with the saml-sp plugin, and manually pasting in the IdP metadata xml.

Our IdP supports retrieving metadata from InCommon using the Metadata Query (MDQ) Protocol for per-entity metadata - reference:

• https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2060616133/MDQMetadataProvider
• https://spaces.at.internet2.edu/display/MDQ/about-mdq

I'm wondering if the saml-sp plugin supports using MDQ for metadata retrieval? Configuring MDQ in Shibboleth SPs in our other local environments involves:

• setting the MDQ URL
• defining a cache directory and cache min/max duration
• obtaining the mdq signing certificate
• reference: https://spaces.at.internet2.edu/display/MDQ/how-to-configure-shib-sp-to-use-mdq

Any information available on how the saml-sp plugin can support this metadata retrieval set-up is much appreciated.

[dsmrt]

This is currently not supported and I'm not sure it will be. I've seen issues with Shibboleth in the past (#104 ... looks like you submitted it).