mdui:UIInfo Issue

[Lohr, Donald A - lohrda]

I believe the issue might have to do with there being no:

#set ($infoURL=$rpUIContext.informationURL)
#if ($infoURL)

#set ($psurl = $rpUIContext.privacyStatementURL)
#if ($psul)

...sections defined in the login.vm file on my Shib IdP.

Are my finding correct?

Don

On 2/13/23 2:46 PM, Lohr, Donald A - lohrda via users wrote:
> *CAUTION: *This email originated from outside of JMU. Do not click 
> links or open attachments unless you recognize the sender and know the 
> content is safe.
> ------------------------------------------------------------------------
> If a SP metadata file contains valid urls in the following items:
>
> mdui:InformationURL
> mdui:PrivacyStatementURL
>
> ..are those supposed to be listed on the Shibboleth login page 
> (login.vm)?
>
> We are running Shibboleth IdP = 4.2.1
>
> If so, they are not showing up. I only see the DisplayName value and 
> the logo on our login page. Does not matter whether the SP is an 
> InCommon Federation member or a stand alone one.
>
> Looking at the locally stored metadata file that prompted my research, 
> I see in the md:EntityDescriptor line the following items that support 
> displaying these UIInfo items:
>
>
> <?xml version="1.0" encoding="utf-8"?>
> <md:EntityDescriptor *xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"* 
> entityID="xxxxxxxxxxxxxxxxxxxxxxxxx" ID="yyyyyyyyyyyyyyyyyyyyy" 
> *xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"*>
>
> Then further down in the SP metadata file I have the following:
>
> <md:SPSSODescriptor ID="zzzzzzzzzzzzzzzzzzzzzzzzzzzz" 
> protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" 
> AuthnRequestsSigned="true" WantAssertionsSigned="true">
>      <md:Extensions>
>         <mdui:UIInfo>
>             <mdui:DisplayName xml:lang="en">Acme 
> Application</mdui:DisplayName>
>             <mdui:InformationURL 
> xml:lang="en">https://www.abc123.com</mdui:InformationURL>
>             <mdui:PrivacyStatementURL 
> xml:lang="en">https://www.abc123.com/company/legal/privacy-policy</mdui:PrivacyStatementURL>
>             <mdui:Logo height="65" width="161" 
> xml:lang="en">https://www.abc123.com/_images/computing/CherwellLogo.png</mdui:Logo>
>         </mdui:UIInfo>
>     </md:Extensions>
>
> Note: In the above I have changed the urls to protect the application 
> and I've masked the entityID and ID values.
>
> What I am missing?
>
> Thanks,
> Don
>
> -- 
> D o n a l d   L o h r
> I n f o r m a t i o n   S y s t e m s
> J a m e s   M a d i s o n   U n i v e r s i t y
> 5 4 0 . 5 6 8 . 3 7 3 0
>

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230213/105c6285/attachment.htm>