mdui:UIInfo Issue

Rod Widdowson rdw at steadingsoftware.com
Tue Feb 14 01:40:07 UTC 2023


Makes sense to me. The rpuicontext populates those fields

Sent from my iPad

> On 13 Feb 2023, at 22:04, Lohr, Donald A - lohrda via users <users at shibboleth.net> wrote:
> 
>  I believe the issue might have to do with there being no:
> 
> #set ($infoURL=$rpUIContext.informationURL)
> #if ($infoURL)
> 
> #set ($psurl = $rpUIContext.privacyStatementURL)
> #if ($psul)
> 
> ...sections defined in the login.vm file on my Shib IdP.
> 
> Are my finding correct?
> 
> Don
> 
> On 2/13/23 2:46 PM, Lohr, Donald A - lohrda via users wrote:
>> CAUTION: This email originated from outside of JMU. Do not click links or open attachments unless you recognize the sender and know the content is safe.
>> If a SP metadata file contains valid urls in the following items: 
>> 
>> mdui:InformationURL
>> mdui:PrivacyStatementURL
>> 
>> ..are those supposed to be listed on the Shibboleth login page (login.vm)? 
>> 
>> We are running Shibboleth IdP = 4.2.1
>> 
>> If so, they are not showing up. I only see the DisplayName value and the logo on our login page. Does not matter whether the SP is an InCommon Federation member or a stand alone one.  
>> 
>> Looking at the locally stored metadata file that prompted my research, I see in the md:EntityDescriptor line the following items that support displaying these UIInfo items:
>> 
>> 
>> <?xml version="1.0" encoding="utf-8"?>
>> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="xxxxxxxxxxxxxxxxxxxxxxxxx" ID="yyyyyyyyyyyyyyyyyyyyy" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
>> 
>> Then further down in the SP metadata file I have the following:
>> 
>> <md:SPSSODescriptor ID="zzzzzzzzzzzzzzzzzzzzzzzzzzzz" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
>>      <md:Extensions>
>>         <mdui:UIInfo>
>>             <mdui:DisplayName xml:lang="en">Acme Application</mdui:DisplayName>
>>             <mdui:InformationURL xml:lang="en">https://www.abc123.com</mdui:InformationURL>
>>             <mdui:PrivacyStatementURL xml:lang="en">https://www.abc123.com/company/legal/privacy-policy</mdui:PrivacyStatementURL>
>>             <mdui:Logo height="65" width="161" xml:lang="en">https://www.abc123.com/_images/computing/CherwellLogo.png</mdui:Logo>
>>         </mdui:UIInfo>
>>     </md:Extensions>
>> 
>> Note: In the above I have changed the urls to protect the application and I've masked the entityID and ID values.
>> 
>> What I am missing?
>> 
>> Thanks,
>> Don
>> 
>> -- 
>> D o n a l d   L o h r
>> I n f o r m a t i o n   S y s t e m s
>> J a m e s   M a d i s o n   U n i v e r s i t y
>> 5 4 0 . 5 6 8 . 3 7 3 0
>> 
>> 
> 
> -- 
> D o n a l d   L o h r
> I n f o r m a t i o n   S y s t e m s
> J a m e s   M a d i s o n   U n i v e r s i t y
> 5 4 0 . 5 6 8 . 3 7 3 0
> -- 
> For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230214/db5ebb07/attachment.htm>


More information about the users mailing list