FW: Idp3.0 Attribute Release Configuration

[Natarajan, Senthil]

Hello,
How to configure Idp3.0 to release particular attributes based on the SP metadata.

1)      First I tried to add the local SP metadata in the metadata-providers.xml

<MetadataProvider id="LocalMetadata" xsi:type="metadata:FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"

                metadataFile="/opt/shibboleth-idp/metadata/sp-metadata.xml">

</MetadataProvider>


I was getting this error even though metadata is declared.
UndeclaredPrefix: Cannot resolve 'metadata:FilesystemMetadataProvider' as a QName: the prefix 'metadata' is not declared.
So I removed it, and have this

<MetadataProvider id="LocalMetadata" xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"

                metadataFile="/opt/shibboleth-idp/metadata/sp-metadata.xml">

</MetadataProvider>



2)      And in relying-party.xml file, I have this

<bean id="shibboleth.UnverifiedRelyingParty" parent="RelyingParty">

        <property name="profileConfigurations">

            <list>

            <bean parent="SAML2.SSO" p:encryptAssertions="false" p:postAuthenticationFlows="attribute-release" />

             </list>

        </property>

    </bean>

3)      In attribute-filtter.xml, I have

<afp:AttributeFilterPolicy id="LocalMetadata">

       <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://MACHINENAME.pitt.edu/shibboleth" />



        <afp:AttributeRule attributeID="eduPersonPrincipalName">

            <afp:PermitValueRule xsi:type="basic:ANY" />

        </afp:AttributeRule>



        <afp:AttributeRule attributeID="uid">

            <afp:PermitValueRule xsi:type="basic:ANY" />

        </afp:AttributeRule>



        <afp:AttributeRule attributeID="email">

            <afp:PermitValueRule xsi:type="basic:ANY" />

        </afp:AttributeRule>



    </afp:AttributeFilterPolicy>
But it is not releasing any attributes. What else needs to be configured to release the above attributes?

Thanks,
Senthil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150202/35181071/attachment-0001.html