SAML proxy of IdP to Azure - c14 + requester questions

[Tony Skalski]

When I upgraded to 4.1 I found that I had to add the following
to subject-c14n.properties:

# Lists of attributes to resolve...
idp.c14n.attribute.attributesToResolve = canonicalNameToUseForJoin
#  and then select a principal name from
idp.c14n.attribute.attributeSourceIds = canonicalNameToUseForJoin

I used the same proxying guide and my
attribute-sourced-subject-c14n-config.xml looked just like the example,
before I upgraded it to 4.1.

On Mon, Apr 17, 2023 at 4:55 PM Dave Perry via users <users at shibboleth.net>
wrote:

> Hi all
>
> I have followed the cookbook on this, and have the flow redirecting to
> Azure, then back with a correct set of details for my login (according to
> the debug level of idp-process). Now I have hit a different snag.
>
> When configuring the c14 part of the Proxy Tasks, it notes you need to put
> a few lines in attribute-sourced-subject-c14n-config.xml - but that errors
> as it can't find a definition for util:list. Noting that it says the
> document hasn't been updated for v4.1+ (was running 4.3.0 when I started
> this, but have now updated to 4.3.1 last week like a good deployer), I
> looked at this page (signposted at the bottom of the Idp/Azure cookbook):
>
> https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631602/AttributePostLoginC14NConfiguration
>
> There is no mention of what I need to configure in
> subject-c14n.properties. Is anyone, who has made this work, willing to
> share what they put in that file? There may be more questions still, but I
> thought I should try to do all the steps before asking for more help.
> (I have not setup the section about refeds/mfa, as we aren't using that as
> far as I know)
>
> When checking the process log, as it checks against each Attribute Filter,
> it is showing a request value of the IdP's entityID. I'm not clear why it
> has seemingly 'lost' the original resource URL requested, or that the
> cookbook mentions how to correct this.
>
> TIA
>
> _________________________________________________
>
> *Dave Perry*
> Application Analyst  *|  *Innovation & Technology Services
>
> York St John University
>
> Lord Mayor’s Walk, York, YO31 7EX
> T: +44(0)1904 876 0000
> email at yorksj.ac.uk  *|  *www.yorksj.ac.uk
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
*Tony Skalski (he/him/his)*
System Administrator | IT
Office: 507-786-3227 <(507)786-3227>
1510 St. Olaf Avenue Northfield, MN 55057
stolaf.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230417/5dc84a74/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-50uhv1hq.png
Type: image/png
Size: 12155 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20230417/5dc84a74/attachment.png>