Glossary: Identity and Access Management

metadata

Also written: SAML metadata, descriptor

A small XML file with a party's entity ID, its addresses and the IdP's signing certificate. Exchanging metadata sets up federation, and the certificate in it is what the app trusts.