Static value attribute

Kevin P. Foote kpfoote at iup.edu
Thu Oct 18 10:33:25 EDT 2012


Your creating the attribute LogoutURL but are you preparing it to be
sent out via your assertion? I think you need to do some encoding on it
first.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute

------
thanks
  kevin.foote

On Thu, 18 Oct 2012, David Bantz wrote:

-> A service wants a URL provided in the SAML assertion from our IdP.
-> It's the same value for everyone in our domain.  I thought I faithfully 
-> transliterated a resolver fragment from the documentation, but the 
-> attribute is not in the outgoing SAML assertion.  
-> 
-> 
-> 
-> resolver fragment:
-> <!-- logout URL for BBC -->
->      <resolver:DataConnector id="staticValueAttributes" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc">
->         <Attribute id="LogoutURL">
->           <Value>https://www.alaska.edu/risksafety/alerts/</Value>
->         </Attribute>
->      </resolver:DataConnector>
-> 
-> attribute filter:
-> <AttributeFilterPolicy id="releaseToBBConnect">
-> <PolicyRequirementRule xsi:type="basic:OR">
->     <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25" />
->     <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Connect/9F95200F70EB4E8F844320653CCD97A8" />
->     <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://ssostg.blackboardconnect.com/SAML/Connect/B46C75BF139144349190F775C38F05A9" />
-> </PolicyRequirementRule>
->    <AttributeRule attributeID="BBConnectFedID">
->         <PermitValueRule xsi:type="basic:ANY" />
->    </AttributeRule>
->    <AttributeRule attributeID="bannerid">
->         <PermitValueRule xsi:type="basic:ANY" />
->    </AttributeRule>
->     <AttributeRule attributeID="FirstName">
->         <PermitValueRule xsi:type="basic:ANY" />
->     </AttributeRule>
->     <AttributeRule attributeID="LastName">
->         <PermitValueRule xsi:type="basic:ANY" />
->     </AttributeRule>
->     <AttributeRule attributeID="ContactRefCode">
->         <PermitValueRule xsi:type="basic:ANY" />
->     </AttributeRule>
->     <AttributeRule attributeID="LogoutURL">
->         <PermitValueRule xsi:type="basic:ANY" />
->     </AttributeRule>
-> </AttributeFilterPolicy>
-> 
-> debug log contains 
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
-> ] - Evaluating if filter policy releaseToBBConnect is active for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:137
-> ] - Filter policy releaseToBBConnect is active for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute BBConnectFedID for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute bannerid for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute FirstName for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute LastName for principal anautiyal
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute ContactRefCode for principal nautical
-> 
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute LogoutURL for principal nautical
-> 
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
-> ] - Evaluating if filter policy releaseToKualiReady is active for principal anautiyal
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:132
-> ] - Filter policy releaseToKualiReady is not active for principal anautiyal
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
-> ] - Evaluating if filter policy releaseToFaculty180 is active for principal anautiyal


More information about the users mailing list