SP 2.5.2 / PHP / metadataAttributePrefix

Peter Schober peter.schober at univie.ac.at
Thu Apr 16 20:04:05 EDT 2015


* Phil Lello <phil at dunlop-lello.uk> [2015-04-17 01:52]:
> My confusion comes from
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication:
> 
> 
> >    - metadataAttributePrefix(string)
> >       - If set, attributes extracted from metadata

Within Shibboleth and SAML the term "metadata" always and specifically
refers to SAML Metadata.
The data structures you're repeatedly referring to are not extracted
and have nothing to do with SAML Metadata.

> > And
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeExtractor#NativeSPAttributeExtractor-MetadataAttributeExtraction%28Version2.2andAbove%29

Again, this is about extracting stuff from SAML Metadata (e.g. a
localized IDP display name, the email address of the technical contact
for that IDP, a logo for that IDP, etc.).

The session data you're referring to is not from SAML Metadata, it
comes dynamically from a session and will differ for every subject,
whereas the attributes the SP can curate from SAML Metadata will be
the same for all subjects from that IDP, because it is data about the
SAML IDP (not about the subject or about the subject's current
session).

-peter


More information about the users mailing list