SP removing attribute value

Cantor, Scott cantor.2 at osu.edu
Sat Jul 22 12:00:59 EDT 2017


On 7/21/17, 5:53 PM, "users on behalf of Cathy Scott" <users-bounces at shibboleth.net on behalf of cathystill at gmail.com> wrote:

> The IdP metadata does not include <shibmd:Scope>.  In fact, on closer inspection, their metadata looks very different what I've
> seen before.  Below is the first part of their metadata. 

That's just a signature.

> Can you tell me what I need to request instead of what they have provided. 

If it's a higher education institution in the US, you should ask them to join InCommon, and then obtain their metadata from there, in an automated and secure fashion. That's how Shibboleth is designed to work. InCommon also curates the Scope extension for you.

If you want to do it yourself, then you can find examples of metadata all over, and the InCommon feed itself includes hundreds of examples, all with Scope extensions. I would not do it yourself.

-- Scott






More information about the users mailing list