Recommendations

• All Identity Providers and Service Providers that are able to use the Metadata Query Protocol (MDQ) shall use that protocol instead of downloading metadata aggregates.
  • Point your SAML implementation MDQ base url against https://mds.swamid.se.Some implementations of MDQ may need to use the longer base url https://mds.swamid.se/entitites/.
• Service Providers (SP) that can't use the MDQ service should use the swamid-idp-transitive metadata feed:
  • https://mds.swamid.se/md/swamid-idp-transitive.xml
  • A service that must limit Identity Providers to those only registered in SWAMID can use the swamid-idp metadata feed:
    
    • https://mds.swamid.se/md/swamid-idp.xml
• Identity Providers that can't use the MDQ service use the swamid-sp-transitive metadata feed metadata feed:
  • https://mds.swamid.se/md/swamid-sp-transitive.xml