...
In order to use Shibboleth-based authentication for access to wireless networks, certain IP addresses of the guest's home institution's Identity Provider (IdP) system must be accessible before the authentication event. This document describes an extension to the UCTrust Metadata for this.
Ensuring the Validity and Correctness of UCTrust Security Information describes UCTrust's management of federation-wide information, the authenticity of which must be verifiable by software processes. Currently, one file, UCTrust-AAP.xml, is contained in the metadata to provide each campus's certifications for level of assurance.
...