Attribute Consent -- Restrict by entityId
Joel Levin
joel.aaron.levin at gmail.com
Wed Feb 15 14:52:21 EST 2017
I'm trying to restrict the 'attribute consent' only to SP with entityID =
https://sp1.example1/test"
The following set up is in my relying-party.xml -- however it is triggering
'attribute consent' for the other entityIds as well.
Any guidance on where I could be missing? Thanks.
<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
<property name="profileConfigurations">
<list>
<!-- <bean parent="Shibboleth.SSO"
p:postAuthenticationFlows="attribute-release" /> -->
<!-- <ref bean="SAML1.AttributeQuery" /> -->
<!-- <ref bean="SAML1.ArtifactResolution" /> -->
<bean parent="SAML2.SSO"
p:postAuthenticationFlows="attribute-release" />
<!-- <ref bean="SAML2.ECP" /> -->
<ref bean="SAML2.Logout" />
<ref bean="SAML2.AttributeQuery" />
<ref bean="SAML2.ArtifactResolution" />
<!-- <ref bean="Liberty.SSOS" /> -->
</list>
</property>
</bean>
<!-- Container for any overrides you want to add. -->
<util:list id="shibboleth.RelyingPartyOverrides">
<bean parent="RelyingPartyByName" c:relyingPartyIds="
https://sp1.example1/test">
<property name="profileConfigurations">
<list>
<bean parent="SAML2.SSO"
p:postAuthenticationFlows="attribute-release" />
</list>
</property>
</bean>
</util:list>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170215/b4707346/attachment.html>
More information about the users
mailing list