Made downloading metadata optional and the URL configurable

playbooks/roles/shibboleth/defaults/main.yml

@@ -9,3 +9,5 @@ shib:
   sp_pem: |
     THE CORRESPONDING CERTIFICATE PEM GOES HERE
 shib_template_path: '.'
+shib_metadata_backup_url: "https://idp.stanford.edu/Stanford-metadata.xml"
+shib_download_metadata: true

playbooks/roles/shibboleth/tasks/main.yml

@@ -15,7 +15,13 @@
   file: path=/etc/shibboleth/metadata state=directory mode=2774 group=_shibd owner=_shibd
 
 - name: Downloads metadata into metadata directory as backup
-  get_url: url=https://idp.stanford.edu/Stanford-metadata.xml dest=/etc/shibboleth/metadata/idp-metadata.xml mode=0640 group=_shibd owner=_shibd
+  get_url: >
+    url={{ shib_metadata_backup_url }}
+    dest=/etc/shibboleth/metadata/idp-metadata.xml
+    mode=0640
+    group=_shibd
+    owner=_shibd
+  when: shib_download_metadata
 
 - name: writes out key and pem file
   template: src=sp.{{item}}.j2 dest=/etc/shibboleth/sp.{{item}}  group=_shibd owner=_shibd mode=0600