[java-identity-provider] branch master updated: Clean up example mappings.

Scott Cantor cantor.2 at osu.edu
Fri Nov 15 16:44:06 EST 2019


This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=8a3423116b621c6bd2cddfed7e0cddfe8a7b6ba5

The following commit(s) were added to refs/heads/master by this push:
       new  8a34231   Clean up example mappings.
8a34231 is described below

commit 8a3423116b621c6bd2cddfed7e0cddfe8a7b6ba5
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Nov 15 16:44:03 2019 -0500

    Clean up example mappings.
---
 .../main/resources/conf/authn/authn-comparison.xml | 37 +++++++++++++++++-----
 1 file changed, 29 insertions(+), 8 deletions(-)

diff --git a/idp-conf/src/main/resources/conf/authn/authn-comparison.xml b/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
index 78c915c..dcf0271 100644
--- a/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
+++ b/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
@@ -77,12 +77,14 @@
     <!--
     Mappings to transform custom Principals for proxied AuthnRequests.
     Key is the input, value is a collection of possibly empty outputs.
-    Used by default to transform authentication type values from SP -> Proxied IdPs.
+    Used by default to transform authentication type values from
+    SPs -> Proxied IdPs.
     -->
     <util:map id="shibboleth.PrincipalProxyRequestMappings">
+        <!--
         <entry>
             <key>
-                <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                <bean parent="shibboleth.SAML1AuthenticationMethod"
                     c:classRef="https://sp.example.org/context" />
             </key>
             <list>
@@ -94,32 +96,51 @@
         </entry>
         <entry>
             <key>
-                <bean parent="shibboleth.SAML1AuthenticationMethod"
-                    c:method="urn:oasis:names:tc:SAML:1.0:am:password" />
+                <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                    c:classRef="https://sp.example.org/context" />
             </key>
             <list>
                 <bean parent="shibboleth.SAML2AuthnContextClassRef"
-                    c:classRef="urn:mace:osu.edu:shibboleth:ac:classes:basic" />
+                    c:classRef="https://proxy.example.org/context1" />
+                <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                    c:classRef="https://proxy.example.org/context2" />
             </list>
         </entry>
+        -->
     </util:map>
 
     <!--
     Mappings to transform proxied Principals for inclusion in Subjects.
     Key is the input, value is a collection of possibly empty outputs.
-    Used by default to transform values from Proxied IdP -> 
+    Used by default to transform values from Proxied IdP. -> 
     -->
     <util:map id="shibboleth.PrincipalProxyResponseMappings">
+        <!--
+        <entry>
+            <key>
+                <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                    c:classRef="https://proxy.example.org/context1" />
+            </key>
+            <list>
+                <bean parent="shibboleth.SAML1AuthenticationMethod"
+                    c:classRef="https://sp.example.org/context" />
+                <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                    c:classRef="https://sp.example.org/context" />
+            </list>
+        </entry>
         <entry>
             <key>
                 <bean parent="shibboleth.SAML2AuthnContextClassRef"
-                    c:classRef="urn:mace:osu.edu:shibboleth:ac:classes:basic" />
+                    c:classRef="https://proxy.example.org/context2" />
             </key>
             <list>
                 <bean parent="shibboleth.SAML1AuthenticationMethod"
-                    c:method="urn:oasis:names:tc:SAML:1.0:am:password" />
+                    c:classRef="https://sp.example.org/context" />
+                <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                    c:classRef="https://sp.example.org/context" />
             </list>
         </entry>
+        -->
     </util:map>
     
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list