MDDriven ECP profile activation

Cantor, Scott cantor.2 at osu.edu
Thu May 27 12:26:34 UTC 2021


On 5/27/21, 2:13 AM, "users on behalf of Andrew Jason Morgan" <users-bounces at shibboleth.net on behalf of morgan at oregonstate.edu> wrote:

>  Where did I goof?  How do I create a new MD tag to trigger the activation?

You're misappropriating the propertyName in that wiring to mean the name of your metadata tag, it's not. The property name in those functions is the name of the setting in the configuration, which is activationCondition, as in the example. The tag name should be "http://shibboleth.net/ns/profiles/saml2/sso/ecp/activationCondition", which is what all that code tries to find unless you add more settings (for no obvious reason) to change the name of the tag it looks for.

I didn't actually include the metadata in the example, I'll add it.

-- Scott




More information about the users mailing list