Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: move sig req to notice block

ACOnet publishes several SAML 2.0 Metadata documents, some of which are documented below. All

Note
iconfalse
titleSignature Validation required for any Metadata consumption

All use of SAML Metadata published by ACOnet requires verification of the cryptographic signature (

...

xmldsig) on that metadata against the published Metadata Signing Key. Trust in any information contained in SAML Metadata published by ACOnet should only be derived from a valid signature with that key, not based on the URL the metadata is downloaded from.

Service Providers only providing services to ACOnet participants can use this limited Metadata document, which only contains entities registered with ACOnet (i.e., those accounted for by formal ACOnet Identity Federation members who are bound by the ACOnet Identity Federation Policy):

...