how to configure security contact metadata extension

[Felix Gorschlüter]

Hi Lanxin,

"security" lives in a different namespace. This should work:

<ContactPerson xmlns:remd="http://refeds.org/metadata" 
contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security">
   <GivenName>Andrea</GivenName>
   <SurName>Ceccanti</SurName>
<EmailAddress>mailto:andrea.ceccanti at cnaf.infn.it</EmailAddress>
</ContactPerson>

Best regards,

Felix


Am 11.07.22 um 10:42 schrieb MA Lanxin:
>
> Hello,
>
> I am using IDP4. I need to configure security contact metadata extension.
>
> Here is an example below. If I want to generate the similar lines in 
> my  IDP4 metadata,  how should I do/modify which configuration files  ?
>
>
> <ContactPerson contactType="support">
> <GivenName>Andrea</GivenName>
> <SurName>Ceccanti</SurName>
> <EmailAddress>mailto:andrea.ceccanti at cnaf.infn.it</EmailAddress>
> </ContactPerson>
> <ContactPerson contactType="technical">
> <EmailAddress>mailto:iam-support at lists.infn.it</EmailAddress>
> </ContactPerson>
> <ContactPerson contactType="administrative">
> <GivenName>Davide</GivenName>
> <SurName>Salomoni</SurName>
> <EmailAddress>mailto:davide.salomoni at cnaf.infn.it</EmailAddress>
> </ContactPerson>
> <ContactPerson contactType="other">
> <GivenName>Andrea</GivenName>
> <SurName>Ceccanti</SurName>
> <EmailAddress>mailto:andrea.ceccanti at cnaf.infn.it</EmailAddress>
> </ContactPerson>
> </EntityDescriptor>
>
>
> Thanks a lot,
> Best regards,
>
> Lanxin
>
>     -----原始邮件-----
>     *发件人:*"Woolf, Carl" <Carl_Woolf at hms.harvard.edu>
>     *发送时间:*2022-07-10 03:04:04 (星期日)
>     *收件人:* "Shib Users" <users at shibboleth.net>
>     *抄送:*
>     *主题:* Re: servlet access of Attributes via Server Variables?
>
>     Thanks Nate, that does help! I will work on this approach next week….
>
>     Best regards, - Carl
>
>     *From: *users <users-bounces at shibboleth.net> on behalf of Nate
>     Klingenstein <ndk at signet.id>
>     *Date: *Saturday, July 9, 2022 at 1:40 PM
>     *To: *Shib Users <users at shibboleth.net>
>     *Subject: *RE: servlet access of Attributes via Server Variables?
>
>     Carl,
>
>     > …myHttpRequest.getAttribute(“attributeName”)
>
>     For whatever you've named the HTTP request object and whatever
>     you're mapping attribute names on the wire to behind the SP via
>     attribute-map.xml, precisely that, yes.
>
>     If you're having trouble getting an attribute populated for some
>     reason and things are being routed through the normal ACS
>     mechanism, then it's possible that you don't have Shibboleth
>     configured to protect the URL path that you're accessing.  You can
>     see all the attributes Shibboleth thinks it has for you by
>     authenticating and then going to:
>
>     https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334875/Session+Handler
>
>     You can of course also just dump all the attributes from
>     myHttpRequest.
>
>     Hope this helps,
>     Nate
>
>     --------
>     Signet, Inc.
>     The Art of Access ®
>
>     https://www.signet.id
>     -- 
>     For Consortium Member technical support, see
>     https://shibboleth.atlassian.net/wiki/x/ZYEpPw
>     To unsubscribe from this list send an email to
>     users-unsubscribe at shibboleth.net
>
>
-- 
Dr. rer. nat. Felix Gorschlüter
Wissenschaftlicher Mitarbeiter (Identitätsmanagement)

Zentrum für Informations- und Medientechnologie
Gebäude 25.41, Raum 01.31

Heinrich-Heine-Universität Düsseldorf
Universitätsstraße 1
40225 Düsseldorf

Postanschrift: 40204 Düsseldorf

Telefon: +49 211 81 15041
E-Mail:felix.gorschlueter at hhu.de
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220711/2c6f0e15/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5405 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20220711/2c6f0e15/attachment.p7s>