IdP - EntityAttributes - Predicate - Regex filter for federation SPs

[Martin Lunze]

Hello Scott,

thank you very much for your time and your continuous help.

I had not been aware that adding a tag to every entity of edugain is 
such expensive work.
Ok, then i will mark my local SPs.

At the moment i add every local SPs with a single 
FilesystemMetadataProvider.
Unfortunately i have no local metadata-administration tool oder 
webservice to manage all our local metadata-files.

> <MetadataProvider id="LOCALMD-IDM"
>     xsi:type="FilesystemMetadataProvider"
>     metadataFile="%{idp.home}/metadata/idm-metadata.xml"/>

Can you think of a solution to add such a tag in a flexible way to every 
MetadataProvider with an ID beginning with "LOCALMD-.*"?
Or did i have to add the entityAttributeFilter to every MetadataProvider?

With nice regards.
Martin

Am 24.04.2018 um 16:29 schrieb Cantor, Scott:
>> But now our idp is joining EduGain and i am looking for a mechanism to simply
>> and flexible check if the sp (the user wants to login) is in edugain or not.
>> I did not want to extend the list of registration authorities and i did not want
>> to "mark" our local sp and using "InEntityGroup" is also no possibility.
> I would personally mark your local SPs, there are a lot fewer of them. Adding a tag to every EduGAIN entity is a ton of expensive work in time and memory, at least until you're looking up metadata per entity.
>
>> Among other questions came up i now want to know if it is possible to use
>> regex for this task?
> You already found it, it's part of that Candidate class you're already wiring up.
>
> -- Scott
>

-- 
Martin Lunze
IT-Systemadministrator

Technische Universität Dresden
Zentrum für Informationsdienste und Hochleistungsrechnen (ZIH)
Operative Prozesse und Systeme (OPS)
01062 Dresden

Tel.: +49 (351) 463-35881
E-Mail: martin.lunze at tu-dresden.de

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180425/462997e5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5677 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20180425/462997e5/attachment.p7s>