Test Accounts (Per -- Local/Internal IdP Login Account)

Peter Schober peter.schober at univie.ac.at
Thu Aug 1 05:56:07 EDT 2019


* Joshua Brodie <josbrodie at gmail.com> [2019-07-31 19:32]:
> Didn't want to hijack the thread on 'Local/Internal IdP Login Account'.
> 
> For test accounts -- could 'ImpersonateInterceptConfiguration' be an option

While not suitable for all use-cases one might want test accounts for
it's still worth mentioning: https://access-check.edugain.org/

TL;DR: If an SP is available via eduGAIN this special-purpose
self-service IDP can be used with multiple different data profiles
(with affiliations, without, permutations thereof, etc.) by anyone who
can receive email sent to that SP's ContactPerson/@EmailAddress in
Metadata.
I.e., this method does not involve any changes at your IDM system or
IDP and allows any SP admin to test their own SP with different data
profiles -- and only their own SP.

Source code is available in two "eduGAIN Access Check" respositories
at https://code.geant.net/stash/repos?visibility=public

-peter


More information about the users mailing list