Difference in Release Consent and aacli.sh names from attribute registry

Lipscomb, Gary glipscomb at csu.edu.au
Wed May 25 02:38:24 UTC 2022


Hi List,

Environment
RHEL 8
Tomcat 9
IdP 4.1.7
OpenJDK 11

I'm find an issue with the attribute-registry configuration that if I don't specify a language [1] the consent release view  displays the saml2.name but aacli.sh displays the Friendly Name
When if I specify a language [2] Consent Release uses the  displayName and aacli.sh uses the saml2.name

Have I missed a confuration somewhere?

Regards

Gary

[1] Custom Attribute Encoder (no language specified)

          <bean parent="shibboleth.TranscodingProperties">
              <property name="properties">
                  <props merge="true">
                      <prop key="id">AvaAwareUserGroup</prop>
                      <prop key="transcoder">SAML2StringTranscoder</prop>
                      <prop key="displayName">xCCTV Group</prop>
                      <prop key="saml2.name">AvaAwareUserGroup</prop>
                      <prop key="saml2.friendlyName">zCCTV Group</prop>
                      <prop key="saml2.encodeType">false</prop>
                  </props>
              </property>
          </bean>


Consent Release
Information to be Provided to Service
AvaAwareUserGroupCCTV_DIT


aacli.sh

        <saml2:Attribute FriendlyName="zCCTV Group" Name="AvaAwareUserGroup" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
            <saml2:AttributeValue>CCTV_ DIT</saml2:AttributeValue>
        </saml2:Attribute>



[2] Custom Attribute Encoder (with language specified)

          <bean parent="shibboleth.TranscodingProperties">
              <property name="properties">
                  <props merge="true">
                      <prop key="id">AvaAwareUserGroup</prop>
                      <prop key="transcoder">SAML2StringTranscoder</prop>
                      <prop key="displayName.en">xCCTV Group</prop>
                      <prop key="saml2.name">AvaAwareUserGroup</prop>
                      <prop key="saml2.friendlyName.en">zCCTV Group</prop>
                      <prop key="saml2.encodeType">false</prop>
                  </props>
              </property>
          </bean>

Consent Release

Information to be Provided to Service
DFM xCCTV GroupCCTV_DIT

aacli.sh

        <saml2:Attribute FriendlyName="AvaAwareUserGroup" Name="AvaAwareUserGroup" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
            <saml2:AttributeValue>DFM_CCTV_DIT</saml2:AttributeValue>
        </saml2:Attribute>

Gary Lipscomb
Technical Officer, Systems | IT Infrastructure & Security | Division of Information Technology
Charles Sturt University


|   ALBURY-WODONGA   |   BATHURST    |   CANBERRA   |   DUBBO   |   GOULBURN   |   ORANGE   |   PARRAMATTA    |   PORT MACQUARIE   |   WAGGA WAGGA   |

LEGAL NOTICE
This email (and any attachment) is confidential and is intended for the use of the addressee(s) only. If you are not the intended recipient of this email, you must not copy, distribute, take any action in reliance on it or disclose it to anyone. Any confidentiality is not waived or lost by reason of mistaken delivery. Email should be checked for viruses and defects before opening. Charles Sturt University does not accept liability for viruses or any consequence which arise as a result of this email transmission. Email communications with Charles Sturt University may be subject to automated email filtering, which could result in the delay or deletion of a legitimate email before it is read at Charles Sturt University. The views expressed in this email are not necessarily those of Charles Sturt University.
Charles Sturt University in Australia The Grange Chancellery, Panorama Avenue, Bathurst NSW Australia 2795 (ABN: 83 878 708 551). Charles Sturt University - TEQSA Provider Identification: PRV12018 (Australian University). CRICOS Provider: 00005F.
Consider the environment before printing this email.


More information about the users mailing list