What attributes does testshib display?

Delahunty, Mark m.d at ucc.ie
Thu Mar 6 13:42:49 EST 2014


Hi Kevin

 that looks better, I get one additional attribute:

.
.
unscoped-affiliation is: member

thanks

Mark



> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
> On Behalf Of Kevin Foote
> Sent: 06 March 2014 18:37
> To: Shib Users
> Subject: Re: What attributes does testshib display?
> 
> Mark
> 
> Can you try your request using testshib again and let me know what
> happens?
> 
> --------
> thanks
>  kevin.foote
> 
> On Mar 6, 2014, at 9:24 AM, Delahunty, Mark <m.d at ucc.ie> wrote:
> 
> > I am new to shibboleth, so apologies if this is a silly question.
> >
> >
> > I have installed a shibboleth IdP with a LDAP connector. Now I want to
> experiment with manipulating and releasing attributes. I'm guessing
> testshib would be a good way to do this. So I have released attributes (I
> think) to testshib but I do not know if testshib gets them.
> >
> > I authenticate OK via https://sp.testshib.org/
> >
> > Then I can see this log entry, which shows I have released
> eduPersonAffiliation and transientId :
> >
> > - INFO [Shibboleth-Audit:1028] -
> ...|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-
> Redirect|...|eduPersonAffiliation,transientId,|_97d0b2be2bef4896179a515ac4
> 3f22ea||
> >
> >
> > https://sp.testshib.org/testing/sample.jsp says:
> >
> > "
> > Here are some pieces of information I can tell about you using the
> information Shibboleth gives me:
> > .
> > .
> > Shib-Session-ID is: _...
> > Shib-Session-Index is: _...
> > Shib-Identity-Provider is: https://myshibby.my.domain/idp/shibboleth
> > Shib-Authentication-Method is:
> urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
> > Shib-Authentication-Instant is: ...
> > Shib-AuthnContext-Class is:
> urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
> > Shib-Application-ID is: default
> > "
> >
> > So, I have two questions:
> >
> > Should testshib be displaying the two attributes I have released to it?
> >
> > And
> >
> > Is testshib the best way to do this sort of testing/experimentation?
> >
> >
> >
> > Thanks
> >
> > Mark
> >
> > --
> > Mark Delahunty
> > Information Technology Services
> > University College Cork
> > http://it.ucc.ie/
> >
> >
> >
> >
> > --
> > To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net
> 
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net




More information about the users mailing list