RE: [security-services] metadata and an ISSUE for 1.1 re: useof"source" and "destinatio n"

[Scott Cantor <cantor.2@osu.edu>]

>Does anyone else have an opinion on this matter?

I'm also generally thinking a unified approach to metadata would be good. In particular, identifying an entity (a site? a party?) in
a unique and consistent way whether the entity is acting in one role or another seems like a plus to me.

If I want to be both a source and a destination in a SSO context, or also act as other things in other flows, I think that should be
possible.

FWIW, the other SAMLish systems that have looked at metadata, even a little, seem to be embracing that general concept. One of
them's mine, but we're not very far along, so it's merely a point of comparison, and we didn't need most of *this* SSO metadata
because we added to the SSO flows and use POST.

-- Scott