Turning Off uApprove Intercept on Idp3.0

[Natarajan, Senthil]

Thanks Walter.

It worked!

For some reason, even though I configured the metadata file in the metadata-providers.xml, it is not recognizing seems. And it goes and looks bean under UnverifiedRelyingParty not on the DefaultyRelyingParty in the relying-party.xml. So I made your suggested changes under UnverifiedRelyingParty.

<MetadataProvider id="LocalMetadata" xmlns:metadata="urn:mace:shibboleth:2.0:metadata" xsi:type="metadata:FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"
                metadataFile="/opt/shibboleth-idp/metadata/idp-metadata.xml">
</MetadataProvider>

<MetadataProvider id="LocalSPMetadata" xmlns:metadata="urn:mace:shibboleth:2.0:metadata" xsi:type="metadata:FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"
                metadataFile="/opt/shibboleth-idp/metadata/sp-metadata.xml">
</MetadataProvider>

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Walter Forbes Hoehn (wassa)
Sent: Friday, February 06, 2015 4:26 PM
To: Shib Users
Subject: Re: Turning Off uApprove Intercept on Idp3.0

Changing this in relying-party.xml worked for me:

<bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release” /> to  <ref bean="Shibboleth.SSO" />
   
and             
<bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" /> to <ref bean="SAML2.SSO" />

-Walter Hoehn



            
> On Feb 6, 2015, at 3:11 PM, Natarajan, Senthil <senthil at pitt.edu> wrote:
> 
> Hello,
> 
> How to turn off the default attribute-release intercept feature on Idp3.0, and release attributes without information release consent.
> 
> Please let me know what attributes to be made false on what bean, xml 
> etc…
> 
> Thanks,
> Senthil
> 
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net