Testshib Dummy Users Email Attribute

Peter Schober peter.schober at univie.ac.at
Wed Jun 24 07:11:04 EDT 2015


* Antelmo Aguilar <Antelmo.Aguilar.17 at nd.edu> [2015-06-23 20:57]:
> Since testshib does not provide an e-mail attribute for the testshib
> users, I was wondering if you could tell me if it is possible to get
> more attributes from a local LDAP server.
> I am thinking of setting up LDAP and adding the dummy users there,
> but with an e-mail attribute.

* Nate Klingenstein <ndk at internet2.edu> [2015-06-24 04:24]:
> I didn’t include the need to set up any IdP because they could
> implement whatever they’d like here and it wouldn’t require many
> moving parts, but it’s not LDAP. It’s a pretty simple IdP
> configuration, though.  If you were to use Shibboleth, you wouldn’t
> even need to configure a login mechanism.  Install IdP,
> ldap.properties, IdP <-> SP configuration, done.

Personally I don't consider installing and configuring an IDP of your
own (a SAML Attribute Authority, really), plus Attribute Aggregation
at the SP, only to get a few "dummy users" into an SP a sensible
suggestion, if someone merely wanted a few extra attributes in the
SAML SP that testshib doesn't provide.

I'd much rather do it in code (of the web application) or in the web
server (cf. mod_env).

Or forgo the use of the testshib IDP altogether, of course, and (only)
run an IDP of our own. Still no aggregation necessary.
-peter


More information about the users mailing list