An Apache Ant project in which ISO Schematron is used to validate SAML metadata about Service Providers, as published by the CLARIN Service Provider Federation.
The aim of this validation effort, beyond XML Schema (XSD), is that the SAML metadata XSDs have some weaknesses (e.g., regarding md:ContactPerson the element), and that validation beyond basic formal validity has proven indispensable for non-technical policy adherence and interoperability of SAML metadata across identity federations and SAML implementations.
-
Saxonica Saxon, e.g. SaxonHE9-6-0-10J. Please note that newer versions of Saxon might cause problems.
-
Clone the repository,
cd
to it: -
Run
ant -v -DinputFile=file:<path_to_saml_metadata_file>
By default, if -DinputFile=file:<path_to_saml_metadata_file>
is not specified, ant -v
will assess the metadata quality of the the main CLARIN SPF metadata file. This default is defined in build.xml#L34[build.xml]
For a running example check how Travis CI deploys and runs it on the CLARIN SPF-SPs-metadata repository
The SAML metadata QA validator is currently used by the CI system of the CLARIN SPF-SPs-metadata repository to automatically generate its QA assessment report on every commit.
This aids CLARIN SP operators and managers, to access the quality and conformance of their metadata with the CLARIN SPF metadata guidelines, uppon submmition of their SAML metadata to the repository. It also helps the CLARIN SPF operators to make recomendations and acceptance decisions.
-
A validation stylesheet based on the Schematron QA validation suite.
-
SVRL reports for the specified
inputFile
, or by default for the main CLARIN SPF metadata file. -
Files in a simplified XML format (based on the SVRL reports) that can be processed and displayed by Google Sheets or by the QA assessment report page. The QA assessment report page presents the current version of output to human consumers. This page is made available to SP operators and other stakeholders.