unable to configure DataSealer decrypt

[Giuseppe Giacomini]

Hello everyone
I have successfully activated the TOTP plugin on our idp and it works as
expected.
(
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376878877/TOTP#Source-of-Token-Seeds
)

Now I want to secure the seeds using encryption.
I have created the keystore and have added the beans in server.xml file,
as  indicated in the documentation, but I have trouble in defining the
attribute resolver entry.
Could someone post an example?
This is my, not working, entry:

<AttributeDefinition xsi:type="Decrypted" dataSealerRef="totp.DataSealer"
id="tokenSeeds">
        <DisplayName xml:lang="en">TOTP Token</DisplayName>
        <DisplayName xml:lang="it">TOTP Token</DisplayName>
        <DisplayDescription xml:lang="en">Time Based
OTP</DisplayDescription>
        <DisplayDescription xml:lang="it">Time Based
OTP</DisplayDescription>
        <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.5.4.4"
friendlyName="tokenSeeds" encodeType="false" />
    </AttributeDefinition>

Thank you


-- 
Giacomini Giuseppe
Università Ca' Foscari Venezia
ASIT- Settore Sistemi
giuseppe.giacomini at unive.it
tel. 041 234 7118
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220307/e9827fa9/attachment.htm>