RE: [saml-dev] Artifact and Metadata

["Scott Cantor" <cantor.2@osu.edu>]

> The binding spec gives this info for artifact format detail (3.6.4.2):
> 
> "It is assumed that the destination site will maintain a table of SourceID
> values as well as one or more
> indexed URL endpoints (or addresses) for the corresponding SAML responder.
> The SAML metadata
> specification [SAMLMeta] MAY be used for this purpose."
> 
> How to use Metada for this ?

The metadata is for publishing the indexed endpoints. SourceIDs for type 04
artifacts are the hash of the entityID. You have to know that mapping to use
artifacts. If your use case requires fully dynamic lookup of IdP metadata
with no prior knowledge, then don't use artifacts, or define a new type code
for including the entityID as the source ID.
 
-- Scott