WebAuthn: Issue with Fido metadata?

Mats Luspa mats.luspa at irf.se
Wed Oct 30 06:24:42 UTC 2024


You are absolutely correct. irfAuthorizedService is an ldap attribute 
not resolved. I have now made a scripted attribute that checks if 
irfAuthorizedService contains shibAdmin and it works now.

Thanks for pointing med to the right direction :)

/Regards Mats

On 2024-10-29 21:35, Michael Grady via dev wrote:
>
>
>> On Oct 29, 2024, at 2:46 PM, Cantor, Scott via dev 
>> <dev at shibboleth.net> wrote:
>>
>>> I think it has to do with that irfAuthorizedService is a multi
>>> -value attribute.
>>
>> It doesn't.
>
> Yes the example I supplied (and that is from a working deployment), 
> the attribute we used could have dozens and dozens of values, so 
> multi-valued is most definitely not the issue.
>
> --
> Michael A. Grady
> IAM Architect, Unicon, Inc.
>
>
>
>
-- 
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email:matsl at irf.se
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key:https://www.irf.se/pgp/matsl
Digital vcard:https://www.irf.se/vcard/mats.luspa

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20241030/2a4fc9a0/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5037 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20241030/2a4fc9a0/attachment-0001.p7s>


More information about the dev mailing list