Describe user attributes in IdP metadata

Tom Scavo trscavo at gmail.com
Mon Apr 2 11:46:23 EDT 2018


On Mon, Apr 2, 2018 at 11:28 AM, Ryan Suarez
<ryan.suarez at sheridancollege.ca> wrote:
>
> I have a requirement from an SP to list the user attributes available for it
> in my Shib3 IdP metadata.

That's a strange requirement. I would be concerned that the SP is
doing (or intends to do) something weird.

> Could someone please point me in the right direction?

It's literally a <saml:Attribute> element in the IDPSSODescriptor,
after the SingleSignOnService elements. Consult the SAML metadata
schema for details.

Tom


More information about the users mailing list