Accessing metadata EntityAttributes from script
Paul B. Henson
henson at cpp.edu
Wed Sep 9 04:32:04 UTC 2020
If the idp is processing a request for a relying party with tags, such as:
<Extensions>
<mdattr:EntityAttributes>
<saml:Attribute Name="http://www.cpp.edu/tags/test"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>Example</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
</Extensions>
where would I find that info in a script? I'd think it would be in the
RelyingPartyContext somewhere, but poking around it's not jumping out
at me. The closest I've found is the "relyingPartyIdContextTree"
which says it returns "A pointer to a context tree containing identifying
material for the relying party" which sounds like what I want, but
it just returns a "BaseContext" and the docs for that are very general :).
It looks like I might want an EntityDescriptor? Which has a getExtensions()
call that looks like it might return the above. I see that's passed as an
input to a condition script, but I'm looking to find them in an mfa script.
Thanks...
--
Paul B. Henson | (909) 979-6361 | http://www.cpp.edu/~henson/
Operating Systems and Network Analyst | henson at cpp.edu
California State Polytechnic University | Pomona CA 91768
More information about the users
mailing list