SP 2.5.2 / PHP / metadataAttributePrefix
Phil Lello
phil at dunlop-lello.uk
Thu Apr 16 20:14:17 EDT 2015
Thank you, I've got it straight now. Hope my confusion hasn't been too
frustrating!
On Fri, Apr 17, 2015 at 1:04 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:
> * Phil Lello <phil at dunlop-lello.uk> [2015-04-17 01:52]:
> > My confusion comes from
> > https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication
> :
> >
> >
> > > - metadataAttributePrefix(string)
> > > - If set, attributes extracted from metadata
>
> Within Shibboleth and SAML the term "metadata" always and specifically
> refers to SAML Metadata.
> The data structures you're repeatedly referring to are not extracted
> and have nothing to do with SAML Metadata.
>
> > > And
> >
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeExtractor#NativeSPAttributeExtractor-MetadataAttributeExtraction%28Version2.2andAbove%29
>
> Again, this is about extracting stuff from SAML Metadata (e.g. a
> localized IDP display name, the email address of the technical contact
> for that IDP, a logo for that IDP, etc.).
>
> The session data you're referring to is not from SAML Metadata, it
> comes dynamically from a session and will differ for every subject,
> whereas the attributes the SP can curate from SAML Metadata will be
> the same for all subjects from that IDP, because it is data about the
> SAML IDP (not about the subject or about the subject's current
> session).
>
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/ecbb495a/attachment.html
More information about the users
mailing list