The SP and IDP communicate using the metadata. So they should exchange the metadata. SP metadata should be generated on the SP for the IDP to use. We need to document the steps involved in this. At a higher level we need to generate the Shib credentials (certs, priv, and pub key) and This needs to go into devops-docs