<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Thanks, it works now.</p>
    <p>However I can't get
      <a class="moz-txt-link-freetext" href="https://testidpshibbpleth.irf.se/idp/profile/admin/webauthn-management">https://testidpshibbpleth.irf.se/idp/profile/admin/webauthn-management</a>
      to work.</p>
    <p>It's not a software issue. The reason is that I have not enough
      knowledge to configure the admin users. As I understand that
      should be done in access-control.xml.<br>
      The policy name is by default AccessByAdmin. How should that be
      configured in access-controll.xml.</p>
    <p>/Regards Mats<br>
    </p>
    <div class="moz-cite-prefix">On 2024-10-29 11:35, Philip Smart
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:DE59B879-3A2D-41F1-92D0-3D474B564E96@jisc.ac.uk">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      Ah yes. Please see <a
href="https://shibboleth.net/pipermail/dev/2024-September/011213.html"
        moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.net/pipermail/dev/2024-September/011213.html</a>.
      Specifically, <a
href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing"
        moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing</a>. 
      <div><br>
      </div>
      <div>As you will be downloading directly from Nexus, you will need
        to first download (and trust) the Jenkins key (
        <a
href="https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS"
          moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS</a>). </div>
      <div><br>
      </div>
      <div>Which you can then use with the latest build of the SNAPSHOT:</div>
      <div><br>
      </div>
      <div><span
style="white-space: pre-wrap; color: rgb(29, 28, 29); font-family: Monaco, Menlo, Consolas, "Courier New", monospace; font-variant-ligatures: none; orphans: 2; widows: 2; background-color: rgba(29, 28, 29, 0.04); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">shibboleth-idp/bin/plugin.sh
 --noCheck --truststore SHIBBOLETH_SNAPSHOT_PGP_KEYS -i <URL or filename of latest snapshot></span></div>
      <div><br>
      </div>
      <div>
        <div>Phil</div>
        <div><br>
          <blockquote type="cite">
            <div>On 29 Oct 2024, at 10:05, Mats Luspa via dev
              <a class="moz-txt-link-rfc2396E" href="mailto:dev@shibboleth.net"><dev@shibboleth.net></a> wrote:</div>
            <br class="Apple-interchange-newline">
            <div>
              <div>
                <p>Hello!</p>
                <p>Thanks for the clarification. <br>
                </p>
                <p>But I don't know how to download those
                  snapshot-versions. I got that I miss a key in the
                  truststore.<br>
                  Are there instructions on how to download these
                  versions or are you going to make a new prerelease
                  version that is downloadable without key?</p>
                <p>/Regards Mats<br>
                </p>
                <div class="moz-cite-prefix">On 2024-10-29 10:58, Philip
                  Smart via dev wrote:<br>
                </div>
                <blockquote type="cite"
cite="mid:741B3EDB-5977-4C55-B355-8FD6C53DF025@jisc.ac.uk">
                  Hi Mats,
                  <div><br>
                  </div>
                  <div>Sorry for the confusion, but version 0.0.3 is not
                    the latest version of the plugin, I should probably
                    remove that. The current release candidate is
                    0.9.0-SNAPSHOT, see <a
href="https://shibboleth.net/cgi-bin/projstatus.cgi"
                      moz-do-not-send="true"
                      class="moz-txt-link-freetext">https://shibboleth.net/cgi-bin/projstatus.cgi</a>.
                    That should be up to date and include the fixed
                    version of the Yubico metadata library that deals
                    gracefully with unrecognised fields. </div>
                  <div><br>
                  </div>
                  <div>Please note that the release candidate (version
                    0.9.0) differs slightly from the earlier beta
                    version (0.0.3). So it would be best to remove the
                    old one and install the new one fresh. </div>
                  <div><br>
                  </div>
                  <div>Phil<br id="lineBreakAtBeginningOfMessage">
                    <div><br>
                      <blockquote type="cite">
                        <div>On 29 Oct 2024, at 06:31, Mats Luspa via
                          dev <a class="moz-txt-link-rfc2396E"
                            href="mailto:dev@shibboleth.net"
                            moz-do-not-send="true">
                            <dev@shibboleth.net></a> wrote:</div>
                        <br class="Apple-interchange-newline">
                        <div>
                          <div>Hello!<br>
                            <br>
                            I've installed webauthn plugin version 0.0.3
                            (downloadable pre-release) and I tried to
                            use Fido metadata service.<br>
                            <br>
                            However I got the following error message:<br>
                            <br>
                            at
net.shibboleth.idp.plugin.authn.webauthn.metadata.FidoMetadataServiceFactory.getObject(FidoMetadataServiceFactory.java:121)^M<br>
                            Caused by:
                            com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException:
                            Unrecognized field "iAPARThreshold" (class
com.yubico.fido.metadata.BiometricAccuracyDescriptor$BiometricAccuracyDescriptorBuilder),
                            not marked as ignorable (5 known properties:
                            "blockSlowdown", "maxRetries",
                            "maxTemplates", "selfAttestedFRR",
                            "selfAttestedFAR"])<br>
                            <br>
                            It seems the field "iAPARThreshold" in the
                            metadata is not recognized.<br>
                            <br>
                            When I disable the use of Fido metadata
                            service the registration process works, but
                            of course I want to use the service.<br>
                            <br>
                            Is it possible to work around this with some
                            configuration?<br>
                            <br>
                            /Regards Mats<br>
                            <br>
                            -- <br>
                            --<br>
                            Mats Luspa<br>
                            Phone: +46 (0)980 79 022<br>
                            Cellular phone: +46 (0)725813330<br>
                            Institutet för rymdfysik               Fax:
                            +46 (0)980 79 050<br>
                            Swedish Institute of Space Physics
                                 email: <a
class="moz-txt-link-abbreviated moz-txt-link-freetext"
                              href="mailto:matsl@irf.se"
                              moz-do-not-send="true">
                              matsl@irf.se</a><br>
                            Visiting/Delivery address: Bengt Hultqvists
                            väg 1, SE-981 92 Kiruna<br>
                            Postal address: Box 812, SE-981 28 Kiruna<br>
                            --<br>
                            PGP Public Key: <a
                              class="moz-txt-link-freetext"
                              href="https://www.irf.se/pgp/matsl"
                              moz-do-not-send="true">
                              https://www.irf.se/pgp/matsl</a><br>
                            Digital vcard: <a
                              class="moz-txt-link-freetext"
                              href="https://www.irf.se/vcard/mats.luspa"
                              moz-do-not-send="true">
                              https://www.irf.se/vcard/mats.luspa</a><br>
                            <br>
                            -- <br>
                            To unsubscribe from this list send an email
                            to <a
class="moz-txt-link-abbreviated moz-txt-link-freetext"
href="mailto:dev-unsubscribe@shibboleth.net" moz-do-not-send="true">
                              dev-unsubscribe@shibboleth.net</a><br>
                          </div>
                        </div>
                      </blockquote>
                    </div>
                    <br>
                  </div>
                  <mc type="body"><font size="1"><font face="Corbel"><br>
                        <p>Jisc is a registered charity (number 1149740)
                          and a company limited by guarantee which is
                          registered in England under company number.
                          05747339, VAT number GB 197 0632 86. Jisc’s
                          registered office is: 4 Portwall Lane,
                          Bristol, BS1 6NB. T 0203 697 5800.<br>
                          <br>
                        </p>
                        <p>Jisc Services Limited is a wholly owned Jisc
                          subsidiary and a company limited by guarantee
                          which is registered in England under company
                          number 02881024, VAT number GB 197 0632 86.
                          The registered office is: 4 Portwall Lane,
                          Bristol, BS1 6NB. T 0203 697 5800.<br>
                          <br>
                        </p>
                        <p>Jisc Commercial Limited is a wholly owned
                          Jisc subsidiary and a company limited by
                          shares which is registered in England under
                          company number 09316933, VAT number GB 197
                          0632 86. The registered office is: 4 Portwall
                          Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
                          <br>
                        </p>
                        <p>For more details on how Jisc handles your
                          data see our privacy notice here: <a
                            class="moz-txt-link-freetext"
href="https://www.jisc.ac.uk/website/privacy-notice"
                            moz-do-not-send="true">
https://www.jisc.ac.uk/website/privacy-notice</a></p>
                      </font></font></mc><br>
                  <fieldset class="moz-mime-attachment-header"></fieldset>
                </blockquote>
                <pre class="moz-signature" cols="72">-- 
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email: <a
                class="moz-txt-link-abbreviated moz-txt-link-freetext"
                href="mailto:matsl@irf.se" moz-do-not-send="true">matsl@irf.se</a>
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: <a class="moz-txt-link-freetext"
                href="https://www.irf.se/pgp/matsl"
                moz-do-not-send="true">https://www.irf.se/pgp/matsl</a>
Digital vcard: <a class="moz-txt-link-freetext"
                href="https://www.irf.se/vcard/mats.luspa"
                moz-do-not-send="true">https://www.irf.se/vcard/mats.luspa</a></pre>
              </div>
              -- <br>
              To unsubscribe from this list send an email to
              <a class="moz-txt-link-abbreviated" href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email: <a class="moz-txt-link-abbreviated" href="mailto:matsl@irf.se">matsl@irf.se</a>
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: <a class="moz-txt-link-freetext" href="https://www.irf.se/pgp/matsl">https://www.irf.se/pgp/matsl</a>
Digital vcard: <a class="moz-txt-link-freetext" href="https://www.irf.se/vcard/mats.luspa">https://www.irf.se/vcard/mats.luspa</a></pre>
  </body>
</html>