Test Accounts (Per -- Local/Internal IdP Login Account)

Peter Schober peter.schober at univie.ac.at
Thu Aug 1 06:03:13 EDT 2019


* Thorsten Michels <michels at rhrk.uni-kl.de> [2019-08-01 11:29]:
> > As for the data: Does your shibgast_resolver_condition.xml resolver
> > consist of all static attribute definitions? That way it would be
> > fully self-contained in the IDP.
> 
> If the question is: "Has the shibgast_resolver_condition.xml to be
> referenced in every DataConnector?", then yes, even the static ones.

I misread the documentation to describe conditionally loading another
attribute resolver file but I see now that it does not (it's only
loading the conditions bean).

(The above was my speculation that the test data to be used with the
test subject could be minted within that extra attribute resolver
using static data connectors, but that's also not what you're doing:
Since you're adding test accounts to the IDM system for authentication
anyway I guess you're also managing their data there.)

So this isn't an answer to the current question about how or where
(not) to add test accounts, but instead provides some additional
assurance that no attributes will be asserted to SPs /other/ than the
ones configured for the test userid.

Sorry for the confusion,
-peter


More information about the users mailing list