What attributes does testshib display?
Nate Klingenstein
ndk at internet2.edu
Thu Mar 6 12:38:59 EST 2014
Mark,
It should, but TestShib makes its logs available to you, so you can check the logs to see why eduPersonAffiliation was not accepted. It's probably because of a scope mismatch between your metadata and the attribute you sent.
Thanks,
Nate.
On Mar 6, 2014, at 10:24 AM, "Delahunty, Mark" <m.d at ucc.ie>
wrote:
> I am new to shibboleth, so apologies if this is a silly question.
>
>
> I have installed a shibboleth IdP with a LDAP connector. Now I want to experiment with manipulating and releasing attributes. I'm guessing testshib would be a good way to do this. So I have released attributes (I think) to testshib but I do not know if testshib gets them.
>
> I authenticate OK via https://sp.testshib.org/
>
> Then I can see this log entry, which shows I have released eduPersonAffiliation and transientId :
>
> - INFO [Shibboleth-Audit:1028] - ...|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|...|eduPersonAffiliation,transientId,|_97d0b2be2bef4896179a515ac43f22ea||
>
>
> https://sp.testshib.org/testing/sample.jsp says:
>
> "
> Here are some pieces of information I can tell about you using the information Shibboleth gives me:
> .
> .
> Shib-Session-ID is: _...
> Shib-Session-Index is: _...
> Shib-Identity-Provider is: https://myshibby.my.domain/idp/shibboleth
> Shib-Authentication-Method is: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
> Shib-Authentication-Instant is: ...
> Shib-AuthnContext-Class is: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
> Shib-Application-ID is: default
> "
>
> So, I have two questions:
>
> Should testshib be displaying the two attributes I have released to it?
>
> And
>
> Is testshib the best way to do this sort of testing/experimentation?
>
>
>
> Thanks
>
> Mark
>
> --
> Mark Delahunty
> Information Technology Services
> University College Cork
> http://it.ucc.ie/
>
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list