[java-identity-provider] branch master updated: Clean up example mappings.
Scott Cantor
cantor.2 at osu.edu
Fri Nov 15 16:44:06 EST 2019
This is an automated email from the git hooks/post-receive script.
scantor pushed a commit to branch master
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=8a3423116b621c6bd2cddfed7e0cddfe8a7b6ba5
The following commit(s) were added to refs/heads/master by this push:
new 8a34231 Clean up example mappings.
8a34231 is described below
commit 8a3423116b621c6bd2cddfed7e0cddfe8a7b6ba5
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Nov 15 16:44:03 2019 -0500
Clean up example mappings.
---
.../main/resources/conf/authn/authn-comparison.xml | 37 +++++++++++++++++-----
1 file changed, 29 insertions(+), 8 deletions(-)
diff --git a/idp-conf/src/main/resources/conf/authn/authn-comparison.xml b/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
index 78c915c..dcf0271 100644
--- a/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
+++ b/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
@@ -77,12 +77,14 @@
<!--
Mappings to transform custom Principals for proxied AuthnRequests.
Key is the input, value is a collection of possibly empty outputs.
- Used by default to transform authentication type values from SP -> Proxied IdPs.
+ Used by default to transform authentication type values from
+ SPs -> Proxied IdPs.
-->
<util:map id="shibboleth.PrincipalProxyRequestMappings">
+ <!--
<entry>
<key>
- <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ <bean parent="shibboleth.SAML1AuthenticationMethod"
c:classRef="https://sp.example.org/context" />
</key>
<list>
@@ -94,32 +96,51 @@
</entry>
<entry>
<key>
- <bean parent="shibboleth.SAML1AuthenticationMethod"
- c:method="urn:oasis:names:tc:SAML:1.0:am:password" />
+ <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ c:classRef="https://sp.example.org/context" />
</key>
<list>
<bean parent="shibboleth.SAML2AuthnContextClassRef"
- c:classRef="urn:mace:osu.edu:shibboleth:ac:classes:basic" />
+ c:classRef="https://proxy.example.org/context1" />
+ <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ c:classRef="https://proxy.example.org/context2" />
</list>
</entry>
+ -->
</util:map>
<!--
Mappings to transform proxied Principals for inclusion in Subjects.
Key is the input, value is a collection of possibly empty outputs.
- Used by default to transform values from Proxied IdP ->
+ Used by default to transform values from Proxied IdP. ->
-->
<util:map id="shibboleth.PrincipalProxyResponseMappings">
+ <!--
+ <entry>
+ <key>
+ <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ c:classRef="https://proxy.example.org/context1" />
+ </key>
+ <list>
+ <bean parent="shibboleth.SAML1AuthenticationMethod"
+ c:classRef="https://sp.example.org/context" />
+ <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ c:classRef="https://sp.example.org/context" />
+ </list>
+ </entry>
<entry>
<key>
<bean parent="shibboleth.SAML2AuthnContextClassRef"
- c:classRef="urn:mace:osu.edu:shibboleth:ac:classes:basic" />
+ c:classRef="https://proxy.example.org/context2" />
</key>
<list>
<bean parent="shibboleth.SAML1AuthenticationMethod"
- c:method="urn:oasis:names:tc:SAML:1.0:am:password" />
+ c:classRef="https://sp.example.org/context" />
+ <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ c:classRef="https://sp.example.org/context" />
</list>
</entry>
+ -->
</util:map>
</beans>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list