how to configure security contact metadata extension

[MA Lanxin]

Hello,

I am using IDP4. I need to configure security contact metadata extension.

Here is an example below. If I want to generate the similar lines in my  IDP4 metadata,  how should I do/modify which configuration files  ?




<ContactPerson contactType="support">
<GivenName>Andrea</GivenName>
<SurName>Ceccanti</SurName>
<EmailAddress>mailto:andrea.ceccanti at cnaf.infn.it</EmailAddress>
</ContactPerson>
<ContactPerson contactType="technical">
<EmailAddress>mailto:iam-support at lists.infn.it</EmailAddress>
</ContactPerson>
<ContactPerson contactType="administrative">
<GivenName>Davide</GivenName>
<SurName>Salomoni</SurName>
<EmailAddress>mailto:davide.salomoni at cnaf.infn.it</EmailAddress>
</ContactPerson>
<ContactPerson contactType="other">
<GivenName>Andrea</GivenName>
<SurName>Ceccanti</SurName>
<EmailAddress>mailto:andrea.ceccanti at cnaf.infn.it</EmailAddress>
</ContactPerson>
</EntityDescriptor>




Thanks a lot,
Best regards,

Lanxin


-----原始邮件-----
发件人:"Woolf, Carl" <Carl_Woolf at hms.harvard.edu>
发送时间:2022-07-10 03:04:04 (星期日)
收件人: "Shib Users" <users at shibboleth.net>
抄送:
主题: Re: servlet access of Attributes via Server Variables?



Thanks Nate, that does help! I will work on this approach next week….

Best regards, - Carl

 

From: users <users-bounces at shibboleth.net> on behalf of Nate Klingenstein <ndk at signet.id>
Date: Saturday, July 9, 2022 at 1:40 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: servlet access of Attributes via Server Variables?

Carl,

> …myHttpRequest.getAttribute(“attributeName”)

For whatever you've named the HTTP request object and whatever you're mapping attribute names on the wire to behind the SP via attribute-map.xml, precisely that, yes.

If you're having trouble getting an attribute populated for some reason and things are being routed through the normal ACS mechanism, then it's possible that you don't have Shibboleth configured to protect the URL path that you're accessing.  You can see all the attributes Shibboleth thinks it has for you by authenticating and then going to:

https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334875/Session+Handler

You can of course also just dump all the attributes from myHttpRequest.

Hope this helps,
Nate

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220711/55bde6cf/attachment.htm>