Other SAML 2 providers can trust an SAML 2 provider of SAP NetWeaver Application Server (AS) Java by accessing the metadata URL. However, public access to this URL is disabled by default. By providing access to this URL, you enable your partners to easily configure their SAML 2 provider to trust your system. But you must consider the security risk of exposing the endpoints and bindings you support to potential attackers.