Attribute Consent -- Restrict by entityId

Joel Levin joel.aaron.levin at gmail.com
Wed Feb 15 14:52:21 EST 2017


I'm trying to restrict the 'attribute consent' only to SP with entityID =
https://sp1.example1/test"

The following set up is in my relying-party.xml -- however it is triggering
'attribute consent' for the other entityIds as well.

Any guidance on where I could be missing? Thanks.


<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
        <property name="profileConfigurations">
            <list>
                <!-- <bean parent="Shibboleth.SSO"
p:postAuthenticationFlows="attribute-release" /> -->
                <!-- <ref bean="SAML1.AttributeQuery" /> -->
                <!-- <ref bean="SAML1.ArtifactResolution" /> -->
                <bean parent="SAML2.SSO"
p:postAuthenticationFlows="attribute-release" />
                <!-- <ref bean="SAML2.ECP" /> -->
                <ref bean="SAML2.Logout" />
                <ref bean="SAML2.AttributeQuery" />
                <ref bean="SAML2.ArtifactResolution" />
                <!-- <ref bean="Liberty.SSOS" /> -->
            </list>
        </property>
    </bean>

    <!-- Container for any overrides you want to add. -->

    <util:list id="shibboleth.RelyingPartyOverrides">



    <bean parent="RelyingPartyByName" c:relyingPartyIds="
https://sp1.example1/test">
        <property name="profileConfigurations">
            <list>
                <bean parent="SAML2.SSO"
p:postAuthenticationFlows="attribute-release" />
            </list>
        </property>
    </bean>

</util:list>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170215/b4707346/attachment.html>


More information about the users mailing list