What attributes does testshib display?

Kevin Foote kpfoote at uoregon.edu
Thu Mar 6 13:36:01 EST 2014


Mark 

Can you try your request using testshib again and let me know what happens?

--------
thanks
 kevin.foote

On Mar 6, 2014, at 9:24 AM, Delahunty, Mark <m.d at ucc.ie> wrote:

> I am new to shibboleth, so apologies if this is a silly question.
> 
> 
> I have installed a shibboleth IdP with a LDAP connector. Now I want to experiment with manipulating and releasing attributes. I'm guessing testshib would be a good way to do this. So I have released attributes (I think) to testshib but I do not know if testshib gets them.
> 
> I authenticate OK via https://sp.testshib.org/ 
> 
> Then I can see this log entry, which shows I have released eduPersonAffiliation and transientId :
> 
> - INFO [Shibboleth-Audit:1028] - ...|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|...|eduPersonAffiliation,transientId,|_97d0b2be2bef4896179a515ac43f22ea||
> 
> 
> https://sp.testshib.org/testing/sample.jsp says:
> 
> "
> Here are some pieces of information I can tell about you using the information Shibboleth gives me:
> .
> .
> Shib-Session-ID is: _...
> Shib-Session-Index is: _...
> Shib-Identity-Provider is: https://myshibby.my.domain/idp/shibboleth
> Shib-Authentication-Method is: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
> Shib-Authentication-Instant is: ...
> Shib-AuthnContext-Class is: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
> Shib-Application-ID is: default
> "
> 
> So, I have two questions:
> 
> Should testshib be displaying the two attributes I have released to it?
> 
> And
> 
> Is testshib the best way to do this sort of testing/experimentation?
> 
> 
> 
> Thanks
> 
> Mark
> 
> --
> Mark Delahunty
> Information Technology Services
> University College Cork
> http://it.ucc.ie/
> 
> 
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list