Delegation...obtaining the ESR endpoint....

Steven Carmody Steven_Carmody at brown.edu
Fri May 11 17:25:09 BST 2012


I'm trying to follow the steps described on the solutions page:

https://spaces.internet2.edu/display/ShibuPortal/Solution+Proposal

1) Step 1.5 describes the IDP issuing a saml:Response. There's a link to 
an example Response:

https://spaces.internet2.edu/display/ShibuPortal/ExampleBrowserResponse

This includes a saml:Attribute described as "a pointer to the IdP's SSOS 
and how to contact it" ....

Any suggestions on how to get an IDP to include this attribute in its 
response ? (because the value is itself an XML document)

2) Looking at the example .... I don't see a pointer to the IdP's SSOS 
... the attribute seems to be all static data ? Should a url be included 
as the value of the wsa:Address element ?

Step 2.3 says "The Portlet must also obtain knowledge about where to 
contact that IdP and how it should secure its request in step 2.4 below. 
This information is represented in ID-WSF by a WS-Addressing 
EndpointReference, or EPR. An EPR is generally carried in a SAML 
attribute in the assertion issued by the IdP in step 1.5 above."

Thanks!


More information about the users mailing list