AttributeFilterPolicy requester Value
kratcliffe at bolton-sfc.ac.uk
Wed Feb 12 09:39:36 EST 2020
Thanks for the reply Rod. That worked.
I very nearly tried that early in testing but read in the integration guide section of the Shibboleth wiki that "The Adobe service is provided via a SAML IdP/SP Proxy (Okta), it is the Okta SP that you are integrating with". The Adobe SSO docs and the integration guide both use a requester value in the form of "https://www.okta.com/saml2/service-provider/xxxxxxxxxxxxxxxxxxxx". I should have stuck to my original plan.
Three beers for Rod(next time you are in Salford, UK).
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.
From: users <users-bounces at shibboleth.net> On Behalf Of Rod Widdowson
Sent: 12 February 2020 11:43
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: AttributeFilterPolicy requester Value
> Is there a way that I can get the requester value for attribute-filter.xml from the IdP or is it easier to log a call with Adobe?
Absent any other unlikely weirdness in your configuration its the EntityID.
>> The Requester type is a PolicyRule which returns true if the name (generally the SAML entityID) of the system
requesting/receiving the attributes (usually an SP) matches a supplied string.
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users