Need Assistance on Releasing Attribute to SP who is part of InCommon

[Edward Patri]

Hey All,

How would I go about releasing attributes to an specific SP who is a member of InCommon. We are currently running Shibboleth IDP v3.2.1.0. I already modified the following files but this still does not seem to work.


1 - Downloaded and installed InCommon-metadata.xml to C:\Program Files (x86)\Shibboleth\IdP\metadata

2 – Modified metadata-proviers.xml to include
<MetadataProvider id="ICMD" xsi:type="FileBackedHTTPMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
                  metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
                  minRefreshDelay="PT5M"
                  maxRefreshDelay="PT1H"
                  refreshDelayFactor="0.75"
                  backingFile="C:\Program Files (x86)\Shibboleth\IdP\metadata\InCommon-metadata.xml"/>

3 – Modified attribute-filter.xml to include

<AttributeFilterPolicy id="releaseToOrgSync">
 <PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://orgsync.com/shibboleth-sp"<https://sp.example.org/>/>
  <AttributeRule attributeID="mail">
    <PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
</AttributeFilterPolicy>

Any assistance would be greatly appreciated.
​​​​​
Edward Patri

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170307/3d42477a/attachment-0001.html>