delegation in IDP3

Cantor, Scott cantor.2 at osu.edu
Thu Jun 9 15:01:13 EDT 2016


> In the v2 relying-party.xml, the old configuration type (from the old
> extension) was samldel:LibertyIDWSFSSOSProfile; per the extension's
> doc, we declared the samldel namespace in the document root as:
> 
>   xmlns:samldel="urn:mace:shibboleth:2.0:idp:ext:delegation:relying-party"

Ok.

> and added this to the schemaLocation:
> 
>  urn:mace:shibboleth:2.0:idp:ext:delegation:relying-party
> classpath:/schema/shibboleth-2.0-idp-ext-delegation-relying-party.xsd

Both classpath and http references to the schemas are supported now.

> We had to remove these in order for the v3 IdP to start up successfully.
> Apparently the schema is different for the v3 port.

There is no such schema. V3 uses Spring natively for that file. The legacy relyng party bits are all the same by design, there would be no point to having them otherwise.

So unless there's a bug, that's not possible, but changing it certainly won't work.

-- Scott



More information about the users mailing list