. is it possible to echo the <saml:Attribute> in Shibboleth IdP?

Peter Schober peter.schober at univie.ac.at
Thu Feb 26 04:57:43 EST 2015


* Roger P <roger.p.5102 at gmail.com> [2015-02-26 04:05]:
> 1. Is it valued to configure IdP just for encryption?

Not sure what reayl the question is here but some people are using the
Shibboleth IDP as "standalone" Attribute Authority, i.e. only for
issuing attribute statements via the SAML-defined protocols and
profiles.

The Shibboleth IDP v2 supports encryption of the SAML responses or the
SAML assertion, but not of SAML attribute elements.

I don't know whether IDPv3 supports encryption of attributes, yet.

> 2. is it possible to echo the <saml:Attribute> in Shibboleth IdP?

The Shibboleth IDP can issue SAML attribute statments, those may
contain SAML attribute elements, yes.
-peter


More information about the users mailing list