Recreating IdP metadata after regenerating certificates?

[Cantor, Scott]

On 4/24/15, 3:24 PM, "David Gersic" <dgersic at niu.edu> wrote:


>
>I'm attempting to release some attributes to testshib, and I think I've 
>got the filter policy set up correctly.

Perhaps, but the only attribute your IdP released was EPTID, which isn't 
really an attribute (or shouldn't be passed as one, anyway). The rest 
aren't being resolved.

>It's been a while since I used testshib.org, but from what I recall of 
>it, sample.jsp used to show whichever attributes I released to it. If 
>sample.jsp depends on AttributeExtractor, which isn't working, that would 
>explain why sample.jsp isn't displaying anything,

No extractor means no attributes period. The SP is not functional there.

> but should I see more in the shibd.log and idp-process.log to indicate 
>that testshib.org requested attributes mail / eduPersonAffiliation / etc. 
>from me? Or doesn't testshib.org request anything but transientId and 
>eduPersonTargetedID now?

There's no requesting of attributes in general. Only indirectly via 
metadata and you're not basing any release policy on that.

-- Scott