IdP - EntityAttributes - Predicate - Regex filter for federation SPs

Tom Scavo trscavo at gmail.com
Fri Jul 20 08:27:22 EDT 2018


On Fri, Jul 20, 2018 at 2:03 AM, Martin Lunze
<martin.lunze at tu-dresden.de> wrote:
>
> I understand the problem Tom and i will use the additionally filter to
> remove such possible entityAttributes in all other metadata where i do not
> want them :-)
> But if i understand Scott correctly, than removing entityAttributes is at
> the moment not possible?

Not with an AttributeFilterScript, no. There may be another way to do
it (using Spring beans) but I don't know what it is.

> Will it be possible in version 3.4 of IdP, like the documentation [1]
> suggerates?
>
> [1]
> https://wiki.shibboleth.net/confluence/display/IDP30/EntityAttributesFilter#EntityAttributesFilter-Removeentityattributesfrommetadata

AFAIK, that is true, yes. The <AttributeFilterScript> configuration
element is scheduled to be introduced in V3.4.

Tom


More information about the users mailing list