What attributes does testshib display?

[Delahunty, Mark]

I am new to shibboleth, so apologies if this is a silly question.


I have installed a shibboleth IdP with a LDAP connector. Now I want to experiment with manipulating and releasing attributes. I'm guessing testshib would be a good way to do this. So I have released attributes (I think) to testshib but I do not know if testshib gets them.

I authenticate OK via https://sp.testshib.org/ 

Then I can see this log entry, which shows I have released eduPersonAffiliation and transientId :

- INFO [Shibboleth-Audit:1028] - ...|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|...|eduPersonAffiliation,transientId,|_97d0b2be2bef4896179a515ac43f22ea||


https://sp.testshib.org/testing/sample.jsp says:

"
Here are some pieces of information I can tell about you using the information Shibboleth gives me:
.
.
Shib-Session-ID is: _...
Shib-Session-Index is: _...
Shib-Identity-Provider is: https://myshibby.my.domain/idp/shibboleth
Shib-Authentication-Method is: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Shib-Authentication-Instant is: ...
Shib-AuthnContext-Class is: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Shib-Application-ID is: default
"

So, I have two questions:

Should testshib be displaying the two attributes I have released to it?

And

Is testshib the best way to do this sort of testing/experimentation?



Thanks

Mark

--
Mark Delahunty
Information Technology Services
University College Cork
http://it.ucc.ie/