[JIRA] (IDP-1874) SAML AttributeQuery DataConnector

Brent Putman (Jira) jira at shibboleth.atlassian.net
Wed Oct 27 18:43:57 UTC 2021


Brent Putman ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A97de0981-adc3-4044-95ed-131622fad81e ) *commented* on IDP-1874 ( https://shibboleth.atlassian.net/browse/IDP-1874?atlOrigin=eyJpIjoiOWYwODY0OWY3Y2Q2NDgwNTk3NTA4NjQ5MWYyYmJiYmEiLCJwIjoiaiJ9 )

Re: SAML AttributeQuery DataConnector ( https://shibboleth.atlassian.net/browse/IDP-1874?atlOrigin=eyJpIjoiOWYwODY0OWY3Y2Q2NDgwNTk3NTA4NjQ5MWYyYmJiYmEiLCJwIjoiaiJ9 )

I imagine the AttributeQuery part is going to be very similar to the artifact resolver I did a few years ago. You're going to have a whole client-side SAML protocol exchange over SOAP. The good news is that because of that work, we already have all (or at least virtually all) of the componentry, wiring layout, HttpClient stuff, etc. Just need the new wiring for an AttributeQuery flow instead of an ArtifactResolve.

For reference see SAML2 HTTPArtifactDecoder#processArtifact and the methods it invokes, as well as the SOAP client wiring in idp-conf-impl conf/soap-client.xml.

Assuming the security model and other protocol requirements are the same as artifact, in soap-client.xml we may need only a new named pipeline in SOAPClient.PipelineFactory.LocatorMap as an alias to the existing SOAPClient.SAML2.Pipeline one. The Java code that orchestrates that will then be very similar to the decoder, and it’s pretty easy.

( https://shibboleth.atlassian.net/browse/IDP-1874#add-comment?atlOrigin=eyJpIjoiOWYwODY0OWY3Y2Q2NDgwNTk3NTA4NjQ5MWYyYmJiYmEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1874#add-comment?atlOrigin=eyJpIjoiOWYwODY0OWY3Y2Q2NDgwNTk3NTA4NjQ5MWYyYmJiYmEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:de8b91b )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211027/14f57636/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-96295504-2c88-494c-98a0-20561cd2ca23
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211027/14f57636/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-b7608d23-1dec-4546-a5ac-19962fa0cffa
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211027/14f57636/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-e462e77a-31ac-4ae0-8fda-cf66e3995b20
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211027/14f57636/attachment-0005.png>


More information about the commits mailing list