WebAuthn: Issue with Fido metadata?

Philip Smart Philip.Smart at jisc.ac.uk
Wed Oct 30 15:52:09 UTC 2024


There is a table on the page that Scott referenced (https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3200516116/DataConnectorConfiguration#Reference) which describes the ‘exportAttributes’ XML attribute. You would need to add that to your DataConnector. Something like:

<DataConnector id=“id”... exportAttributes="irfAuthorizedService”>

…

</DataConnector>

On 30 Oct 2024, at 13:39, Mats Luspa via dev <dev at shibboleth.net> wrote:

Ok, I'm not familiar wit the terminology. But I have this in attribute-resolver.xml:

<DataConnector id="myLDAP" xsi:type="LDAPDirectory" xmlns="urn:mace:shibboleth:2.0:resolver" ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
        baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
        principal="%{idp.attribute.resolver.LDAP.bindDN}"
principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:false}"
trustFile="%{idp.attribute.resolver.LDAP.trustCertificates}"
        authKey="%{idp.attribute.resolver.LDAP.authenticationKey}"
authCert="%{idp.attribute.resolver.LDAP.authenticationCertificate}">
        <FilterTemplate>
            <![CDATA[
                %{idp.attribute.resolver.LDAP.searchFilter}
            ]]>
        </FilterTemplate>
<ReturnAttributes>%{idp.attribute.resolver.LDAP.returnAttributes}</ReturnAttributes>

</DataConnector>

and this in ldap.properties:

idp.attribute.resolver.LDAP.returnAttributes    = uid,cn,homephone,mail,idControll,ou,swamiGmaiAssertion,description,title,sn,givenName,o,mobile,mailAcceptingGeneralID,irfAuthorizedService,totpSecret

But it didn't work with only that. Is it something wrong in this configuration?

/Regards Mats

On 2024-10-30 14:31, Cantor, Scott wrote:
How is an export made?
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3200516116/DataConnectorConfiguration

-> Common XML Attributes
-> exportAttributes

-- Scott




--
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email: matsl at irf.se
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: https://www.irf.se/pgp/matsl
Digital vcard: https://www.irf.se/vcard/mats.luspa

--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net



Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20241030/0255b593/attachment.htm>


More information about the dev mailing list