Static value attribute
David Bantz
dabantz at alaska.edu
Thu Oct 18 10:23:32 EDT 2012
A service wants a URL provided in the SAML assertion from our IdP.
It's the same value for everyone in our domain. I thought I faithfully
transliterated a resolver fragment from the documentation, but the
attribute is not in the outgoing SAML assertion.
resolver fragment:
<!-- logout URL for BBC -->
<resolver:DataConnector id="staticValueAttributes" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc">
<Attribute id="LogoutURL">
<Value>https://www.alaska.edu/risksafety/alerts/</Value>
</Attribute>
</resolver:DataConnector>
attribute filter:
<AttributeFilterPolicy id="releaseToBBConnect">
<PolicyRequirementRule xsi:type="basic:OR">
<basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25" />
<basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Connect/9F95200F70EB4E8F844320653CCD97A8" />
<basic:Rule xsi:type="basic:AttributeRequesterString" value="https://ssostg.blackboardconnect.com/SAML/Connect/B46C75BF139144349190F775C38F05A9" />
</PolicyRequirementRule>
<AttributeRule attributeID="BBConnectFedID">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="bannerid">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="FirstName">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="LastName">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="ContactRefCode">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="LogoutURL">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
</AttributeFilterPolicy>
debug log contains
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
] - Evaluating if filter policy releaseToBBConnect is active for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:137
] - Filter policy releaseToBBConnect is active for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute BBConnectFedID for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute bannerid for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute FirstName for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute LastName for principal anautiyal
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute ContactRefCode for principal nautical
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute LogoutURL for principal nautical
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
] - Evaluating if filter policy releaseToKualiReady is active for principal anautiyal
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:132
] - Filter policy releaseToKualiReady is not active for principal anautiyal
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
] - Evaluating if filter policy releaseToFaculty180 is active for principal anautiyal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121018/88422c09/attachment.html
More information about the users
mailing list