Idp3.0 Attribute Release Configuration

Cantor, Scott cantor.2 at osu.edu
Mon Feb 2 18:16:38 EST 2015


> How to configure Idp3.0 to release particular attributes based on the SP
> metadata.

If you mean based on the identity of the SP (the entityID), then there is no difference, it's the same as in V2 (and you can follow that filter documentation for now).

> I was getting this error even though metadata is declared.

XML errors are a consequence of you using invalid XML, nothing to do with any particular software version.

> 2)      And in relying-party.xml file, I have this
> 
> <bean id="shibboleth.UnverifiedRelyingParty" parent="RelyingParty">
> 
>         <property name="profileConfigurations">

All you're doing there is shortcuiting the use of metadata to begin with. If that even matters, then you have no metadata in place for the SP.

> 3)      In attribute-filtter.xml, I have
> 
> <afp:AttributeFilterPolicy id="LocalMetadata">
> 
>        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString"
> value="https://MACHINENAME.pitt.edu/shibboleth" />


And if that doesn't work, then that is not in fact the identity of the SP.

-- Scott



More information about the users mailing list