mdui:UIInfo Issue

Lohr, Donald A - lohrda lohrda at jmu.edu
Mon Feb 13 19:46:29 UTC 2023


If a SP metadata file contains valid urls in the following items:

mdui:InformationURL
mdui:PrivacyStatementURL

..are those supposed to be listed on the Shibboleth login page (login.vm)?

We are running Shibboleth IdP = 4.2.1

If so, they are not showing up. I only see the DisplayName value and the 
logo on our login page. Does not matter whether the SP is an InCommon 
Federation member or a stand alone one.

Looking at the locally stored metadata file that prompted my research, I 
see in the md:EntityDescriptor line the following items that support 
displaying these UIInfo items:


<?xml version="1.0" encoding="utf-8"?>
<md:EntityDescriptor *xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"* 
entityID="xxxxxxxxxxxxxxxxxxxxxxxxx" ID="yyyyyyyyyyyyyyyyyyyyy" 
*xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"*>

Then further down in the SP metadata file I have the following:

<md:SPSSODescriptor ID="zzzzzzzzzzzzzzzzzzzzzzzzzzzz" 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" 
AuthnRequestsSigned="true" WantAssertionsSigned="true">
      <md:Extensions>
         <mdui:UIInfo>
             <mdui:DisplayName xml:lang="en">Acme 
Application</mdui:DisplayName>
             <mdui:InformationURL 
xml:lang="en">https://www.abc123.com</mdui:InformationURL>
             <mdui:PrivacyStatementURL 
xml:lang="en">https://www.abc123.com/company/legal/privacy-policy</mdui:PrivacyStatementURL>
             <mdui:Logo height="65" width="161" 
xml:lang="en">https://www.abc123.com/_images/computing/CherwellLogo.png</mdui:Logo>
         </mdui:UIInfo>
     </md:Extensions>

Note: In the above I have changed the urls to protect the application 
and I've masked the entityID and ID values.

What I am missing?

Thanks,
Don

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230213/e59dde02/attachment.htm>


More information about the users mailing list