SAML metadata QA validator

Table of Contents

• 1. Requirements
• 2. Running
• 3. Output

An Apache Ant project in which ISO Schematron is used to validate SAML metadata about Service Providers, as published by the CLARIN Service Provider Federation.

The aim of this validation effort, beyond XML Schema (XSD), is that the SAML metadata XSDs have some weaknesses (e.g., regarding md:ContactPerson the element), and that validation beyond basic formal validity has proven indispensable for non-technical policy adherence and interoperability of SAML metadata across identity federations and SAML implementations.

1. Requirements

• Apache Ant 1.9.5 or higher;

• An ISO Schematron implementation;

• Saxonica Saxon, e.g. SaxonHE9-6-0-10J. Please note that newer versions of Saxon might cause problems.

2. Running

Clone the repository, cd to it, adapt the paths in the build.xml to match your system and run ant -v.

3. Output

• A validation stylesheet based on the Schematron QA validation suite.

• SVRL reports for prod_md_about_spf_sps and md_about_spf_sps.

• Files in a simplified XML format (based on the SVRL reports) that Google Sheets can process and display. A Google Sheets spreadsheet presents the current version of output as produced on infra.clarin.eu to human consumers. This spreadsheet is made available to SP operators and other stakeholders.