Static value attribute
Kevin P. Foote
kpfoote at iup.edu
Thu Oct 18 10:33:25 EDT 2012
Your creating the attribute LogoutURL but are you preparing it to be
sent out via your assertion? I think you need to do some encoding on it
first.
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute
------
thanks
kevin.foote
On Thu, 18 Oct 2012, David Bantz wrote:
-> A service wants a URL provided in the SAML assertion from our IdP.
-> It's the same value for everyone in our domain. I thought I faithfully
-> transliterated a resolver fragment from the documentation, but the
-> attribute is not in the outgoing SAML assertion.
->
->
->
-> resolver fragment:
-> <!-- logout URL for BBC -->
-> <resolver:DataConnector id="staticValueAttributes" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc">
-> <Attribute id="LogoutURL">
-> <Value>https://www.alaska.edu/risksafety/alerts/</Value>
-> </Attribute>
-> </resolver:DataConnector>
->
-> attribute filter:
-> <AttributeFilterPolicy id="releaseToBBConnect">
-> <PolicyRequirementRule xsi:type="basic:OR">
-> <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25" />
-> <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://sso.blackboardconnect.com/SAML/Connect/9F95200F70EB4E8F844320653CCD97A8" />
-> <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://ssostg.blackboardconnect.com/SAML/Connect/B46C75BF139144349190F775C38F05A9" />
-> </PolicyRequirementRule>
-> <AttributeRule attributeID="BBConnectFedID">
-> <PermitValueRule xsi:type="basic:ANY" />
-> </AttributeRule>
-> <AttributeRule attributeID="bannerid">
-> <PermitValueRule xsi:type="basic:ANY" />
-> </AttributeRule>
-> <AttributeRule attributeID="FirstName">
-> <PermitValueRule xsi:type="basic:ANY" />
-> </AttributeRule>
-> <AttributeRule attributeID="LastName">
-> <PermitValueRule xsi:type="basic:ANY" />
-> </AttributeRule>
-> <AttributeRule attributeID="ContactRefCode">
-> <PermitValueRule xsi:type="basic:ANY" />
-> </AttributeRule>
-> <AttributeRule attributeID="LogoutURL">
-> <PermitValueRule xsi:type="basic:ANY" />
-> </AttributeRule>
-> </AttributeFilterPolicy>
->
-> debug log contains
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
-> ] - Evaluating if filter policy releaseToBBConnect is active for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:137
-> ] - Filter policy releaseToBBConnect is active for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute BBConnectFedID for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute bannerid for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute FirstName for principal anautiyal
-> 14:29:45.748 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute LastName for principal anautiyal
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute ContactRefCode for principal nautical
->
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:162
-> ] - Processing permit value rule for attribute LogoutURL for principal nautical
->
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
-> ] - Evaluating if filter policy releaseToKualiReady is active for principal anautiyal
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:132
-> ] - Filter policy releaseToKualiReady is not active for principal anautiyal
-> 14:29:45.749 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:128
-> ] - Evaluating if filter policy releaseToFaculty180 is active for principal anautiyal
More information about the users
mailing list