Testshib Dummy Users Email Attribute
Peter Schober
peter.schober at univie.ac.at
Wed Jun 24 07:11:04 EDT 2015
* Antelmo Aguilar <Antelmo.Aguilar.17 at nd.edu> [2015-06-23 20:57]:
> Since testshib does not provide an e-mail attribute for the testshib
> users, I was wondering if you could tell me if it is possible to get
> more attributes from a local LDAP server.
> I am thinking of setting up LDAP and adding the dummy users there,
> but with an e-mail attribute.
* Nate Klingenstein <ndk at internet2.edu> [2015-06-24 04:24]:
> I didn’t include the need to set up any IdP because they could
> implement whatever they’d like here and it wouldn’t require many
> moving parts, but it’s not LDAP. It’s a pretty simple IdP
> configuration, though. If you were to use Shibboleth, you wouldn’t
> even need to configure a login mechanism. Install IdP,
> ldap.properties, IdP <-> SP configuration, done.
Personally I don't consider installing and configuring an IDP of your
own (a SAML Attribute Authority, really), plus Attribute Aggregation
at the SP, only to get a few "dummy users" into an SP a sensible
suggestion, if someone merely wanted a few extra attributes in the
SAML SP that testshib doesn't provide.
I'd much rather do it in code (of the web application) or in the web
server (cf. mod_env).
Or forgo the use of the testshib IDP altogether, of course, and (only)
run an IDP of our own. Still no aggregation necessary.
-peter
More information about the users
mailing list