From 66cfcd59095fdcc03ac3b3e10cc0303aa06d40f3 Mon Sep 17 00:00:00 2001
From: Paul Caskey <pcaskey@internet2.edu>
Date: Fri, 20 Jan 2017 09:57:36 -0600
Subject: [PATCH] metadata providers config

---
 conf/metadata-providers.xml | 35 ++++++++++++++++++++++++++++++++++-
 1 file changed, 34 insertions(+), 1 deletion(-)

diff --git a/conf/metadata-providers.xml b/conf/metadata-providers.xml
index facc296..53f72aa 100644
--- a/conf/metadata-providers.xml
+++ b/conf/metadata-providers.xml
@@ -63,5 +63,38 @@
     <MetadataProvider id="LocalMetadata"  xsi:type="FilesystemMetadataProvider" metadataFile="PATH_TO_YOUR_METADATA"/>
     -->
           
-    
+
+
+	<MetadataProvider id="ShibbolethMetadata" xsi:type="ChainingMetadataProvider"
+		xmlns="urn:mace:shibboleth:2.0:metadata"
+		xmlns:resource="urn:mace:shibboleth:2.0:resource"
+		xmlns:security="urn:mace:shibboleth:2.0:security"
+		xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+		xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata http://shibboleth.net/schema/idp/shibboleth-metadata.xsd
+                        urn:mace:shibboleth:2.0:resource http://shibboleth.net/schema/idp/shibboleth-resource.xsd
+                        urn:mace:shibboleth:2.0:security http://shibboleth.net/schema/idp/shibboleth-security.xsd
+                        urn:oasis:names:tc:SAML:2.0:metadata http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd">
+
+		<MetadataProvider id="InCommonMetadata"
+                      xsi:type="FileBackedHTTPMetadataProvider"
+                      backingFile="%{idp.home}/metadata/localCopyFromInCommon.xml"
+                      metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
+                      maxRefreshDelay="PT8H">
+					  
+			<MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P14D" />
+			
+			<MetadataFilter xsi:type="SignatureValidation"
+				certificateFile="${idp.home}/credentials/inc-md-cert.pem" />
+				
+			<MetadataFilter xsi:type="EntityRoleWhiteList">
+				<RetainedRole>md:SPSSODescriptor</RetainedRole>
+			</MetadataFilter>
+			
+    </MetadataProvider>
+
+    <MetadataProvider id="testbed.tier" xsi:type="FilesystemMetadataProvider" metadataFile="/opt/shibboleth-idp/metadata/testbed-tier-metadata.xml"/>
+
+</MetadataProvider>
+
 </MetadataProvider>