Attribute resolver questions

Pavlos Drandakis pdrados at noc.edunet.gr
Fri Feb 10 09:33:02 EST 2017


Hello all,
i have some questions regarding the attribute resolver configuration (IdP
v3.3.0):

a) in services.xml, idp.service.attribute.resolver.resources is
a list of files so multiple files can be specified. Is it legitimate to
have the same id (in AttributeDefinition) in more than one files? Tests
showed that no error/warning is thrown in the logs and that the last
definition overrides all others. Is this the intended behavior?

b) is there a way to configure attribute resolver files per relying party?
i.e. attribute-resolver.xml for shibboleth.DefaultRelyingParty and
attribute-resolver-override.xml for a relying party in
shibboleth.RelyingPartyOverrides list.

c) is there a way to configure attribute resolver files per profile?
i.e. attribute-resolver-cas.xml for the CAS profile and
attribute-resolver.xml for all the others.

Thanks, in advance
Pavlos



More information about the users mailing list