AttributeFilterPolicy requester Value

[Kevin Ratcliffe]

Thanks for the reply Rod. That worked.

I very nearly tried that early in testing but read in the integration guide section of the Shibboleth wiki that "The Adobe service is provided via a SAML IdP/SP Proxy (Okta), it is the Okta SP that you are integrating with". The Adobe SSO docs and the integration guide both use a requester value in the form of "https://www.okta.com/saml2/service-provider/xxxxxxxxxxxxxxxxxxxx". I should have stuck to my original plan.

Three beers for Rod(next time you are in Salford, UK).

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
W: www.bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.
-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Rod Widdowson
Sent: 12 February 2020 11:43
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: AttributeFilterPolicy requester Value

> Is there a way that I can get the requester value for attribute-filter.xml from the IdP or is it easier to log a call with Adobe?

Absent any other unlikely weirdness in your configuration its the EntityID.

>>
>>  The Requester type is a PolicyRule which returns true if the name (generally the SAML entityID) of the system
requesting/receiving the attributes (usually an SP) matches a supplied string.
>> 

https://wiki.shibboleth.net/confluence/display/IDP30/RequesterConfiguration

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net