SAML proxy of IdP to Azure - c14 + requester questions

[Dave Perry]

Hi all

I have followed the cookbook on this, and have the flow redirecting to Azure, then back with a correct set of details for my login (according to the debug level of idp-process). Now I have hit a different snag.

When configuring the c14 part of the Proxy Tasks, it notes you need to put a few lines in attribute-sourced-subject-c14n-config.xml - but that errors as it can't find a definition for util:list. Noting that it says the document hasn't been updated for v4.1+ (was running 4.3.0 when I started this, but have now updated to 4.3.1 last week like a good deployer), I looked at this page (signposted at the bottom of the Idp/Azure cookbook):
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631602/AttributePostLoginC14NConfiguration

There is no mention of what I need to configure in subject-c14n.properties. Is anyone, who has made this work, willing to share what they put in that file? There may be more questions still, but I thought I should try to do all the steps before asking for more help.
(I have not setup the section about refeds/mfa, as we aren't using that as far as I know)

When checking the process log, as it checks against each Attribute Filter, it is showing a request value of the IdP's entityID. I'm not clear why it has seemingly 'lost' the original resource URL requested, or that the cookbook mentions how to correct this.

TIA

_________________________________________________

Dave Perry
Application Analyst  |  Innovation & Technology Services

York St John University

Lord Mayor’s Walk, York, YO31 7EX
T: +44(0)1904 876 0000
email at yorksj.ac.uk<mailto:email at yorksj.ac.uk>  |  www.yorksj.ac.uk<http://www.yorksj.ac.uk>

[cid:f448ed3d-ae03-498e-b823-4d2c04ee1dd5]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230417/1f92125c/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-50uhv1hq.png
Type: image/png
Size: 12155 bytes
Desc: Outlook-50uhv1hq.png
URL: <http://shibboleth.net/pipermail/users/attachments/20230417/1f92125c/attachment.png>