incorporating opensso metadata and extended metadata xml files into shibboleth SP

csross cross at hccs.com
Sun Aug 19 15:00:38 EDT 2012


Hi,

I have to talk to a new IDP with a new SP on my shib 2.4.3 solaris server. 
I believe the IDP is opensso and the administrator does not have any
experience with shibboleth as they never had any SPs running it.  They sent
me a metadata.xml file which I specified identified in the shibboleth2.xml
file.  They also sent me an extended metadata.xml file which has a number of
Attritribute name= and value.  These look nothing like what is in the
attribute-map.xml file I use for other IDPs I contact but they run
Shibboleth.

A lot of sites I researched mentioned NameIDFormat and I see these in the
metadata.xml and extended-metadata.xml,  but again it is in an unfamilar
format.  Is there any relation to the entries in attritbute-map?

       
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
       
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
       
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
       
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
       
<NameIDFormat>urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified</NameIDFormat>
        

        <Attribute name="nameIDFormatMap">
           
<Value>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName=</Value>
           
<Value>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos=</Value>
           
<Value>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName=</Value>
           
<Value>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress=mail</Value>
           
<Value>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified=</Value>
           
<Value>urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified=employeeNumber</Value>
        </Attribute>

Does anyone have any idea how to incorporate this into Shibboleth please? 
If anyone knows of a link or doc that relates to this it would be
appreciated as well.

Thanks for any help.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/incorporating-opensso-metadata-and-extended-metadata-xml-files-into-shibboleth-SP-tp7581372.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list