Static value attribute

David Bantz dabantz at alaska.edu
Thu Oct 18 10:23:32 EDT 2012


A service wants a URL provided in the SAML assertion from our IdP.
It's the same value for everyone in our domain.  I thought I faithfully 
transliterated a resolver fragment from the documentation, but the 
attribute is not in the outgoing SAML assertion.  



resolver fragment:
<!-- logout URL for BBC -->
     <resolver:DataConnector id="staticValueAttributes" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc">
        <Attribute id="LogoutURL">
          <Value>https://www.alaska.edu/risksafety/alerts/</Value>
        </Attribute>
     </resolver:DataConnector>

attribute filter:
<AttributeFilterPolicy id="releaseToBBConnect">
<PolicyRequirementRule xsi:type="basic:OR">
    <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25" />
    <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Connect/9F95200F70EB4E8F844320653CCD97A8" />
    <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://ssostg.blackboardconnect.com/SAML/Connect/B46C75BF139144349190F775C38F05A9" />
</PolicyRequirementRule>
   <AttributeRule attributeID="BBConnectFedID">
        <PermitValueRule xsi:type="basic:ANY" />
   </AttributeRule>
   <AttributeRule attributeID="bannerid">
        <PermitValueRule xsi:type="basic:ANY" />
   </AttributeRule>
    <AttributeRule attributeID="FirstName">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
    <AttributeRule attributeID="LastName">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
    <AttributeRule attributeID="ContactRefCode">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
    <AttributeRule attributeID="LogoutURL">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
</AttributeFilterPolicy>

debug log contains 
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
] - Evaluating if filter policy releaseToBBConnect is active for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:137
] - Filter policy releaseToBBConnect is active for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute BBConnectFedID for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute bannerid for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute FirstName for principal anautiyal
14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute LastName for principal anautiyal
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute ContactRefCode for principal nautical

14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
] - Processing permit value rule for attribute LogoutURL for principal nautical

14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
] - Evaluating if filter policy releaseToKualiReady is active for principal anautiyal
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:132
] - Filter policy releaseToKualiReady is not active for principal anautiyal
14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
] - Evaluating if filter policy releaseToFaculty180 is active for principal anautiyal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121018/88422c09/attachment.html 


More information about the users mailing list