ValueConfiguration differs from IdP v3.x to v4.x?

[Marco Malavolti]

Hi to all of you,

I've installed and configured Shibboleth IdP v4.0.0 and I get a
different behaviour of ValueConfiguration:

https://wiki.shibboleth.net/confluence/display/IDP4/ValueConfiguration

between the previous IdP v.3.x and the new IdP v4.0.0.


In the Attribute Filter of Shibboleth IdP v4 I put the following rule:

   <!-- Release the 'eduPersonEntitlement' attribute with a specific
value to Elsevier ScienceDirect -->
   <AttributeFilterPolicy id="Elsevier_ScienceDirect">
      <PolicyRequirementRule xsi:type="Requester"
value="https://sdauth.sciencedirect.com/" />

      <AttributeRule attributeID="eduPersonEntitlement">
         <PermitValueRule xsi:type="Value"
value="urn:mace:dir:entitlement:common-lib-terms" />
      </AttributeRule>
   </AttributeFilterPolicy>

and I obtain this attribute release:

  {
    "name": "eduPersonEntitlement",
    "values": [
        "urn:mace:dir:entitlement:common-lib-terms",
        "urn:mace:terena.org:tcs:escience-user",
        "urn:mace:terena.org:tcs:personal-user"
    ]
  }


In the Attribute Filter of Shibboleth IdP v3.x I put the following rule:

     <!-- Release the 'eduPersonEntitlement' attribute with a specific
value to Elsevier ScienceDirect -->
     <AttributeFilterPolicy id="Elsevier_ScienceDirect">
         <PolicyRequirementRule xsi:type="Requester"
value="https://sdauth.sciencedirect.com/" />

         <AttributeRule attributeID="eduPersonEntitlement">
             <PermitValueRule xsi:type="Value"
value="urn:mace:dir:entitlement:common-lib-terms" ignoreCase="true" />
         </AttributeRule>
     </AttributeFilterPolicy>

and I obtain this attribute release (the correct one for my scopes):

  {
    "name": "eduPersonEntitlement",
    "values": [
             
"StringAttributeValue{value=urn:mace:dir:entitlement:common-lib-terms}"         
]
  }


Can someone help me, please?

Thank you so much!

:-)

-- 
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI:07577141000
Mobile: +39 331 608 3639
Skype: marco.mala
PGP KEY: https://keys.openpgp.org/search?q=marco.malavolti@garr.it