Can the MDA add entity attributes?

[Wessel, Keith]

No problem! Glad to help.

While we're here, two more questions.

Our old metadata publishing process used to publish the entities in alphabetical order. While, as long as each entity is unique, order doesn't matter, I'm still curious how easy it would be for me to get the MDA to do this. Can I define a merge strategy on the merge stage? And are there any merge strategy beans available that do an alphabetical sort?

And second question: I'm currently using a demultiplexer stage to take all entities from an upstream aggregate, make two copies of them, and for one copy, retain a given list of SPs and tag them. The other copy throws away that same list of SPs. Those later get merged back together, resulting in all entities from the original aggregate with selected ones having an entity attribute applied to them. This would be much cleaner with the split merge stage since it would do all the work for me. Problem is I couldn't figure out how to do a selection strategy that builds a predicate saying "the entity ID of this item matches one of the entityIDs in a list". Is there an easy way to do this?

Both of these felt like they required extending the MDA with my own Java code rather than just something in Spring. But I could be missing something.

Thanks,
Keith

From: Ian Young <ian at iay.org.uk>
Sent: Thursday, September 19, 2024 6:32 AM
To: Shib Users <users at shibboleth.net>
Cc: Wessel, Keith <kwessel at illinois.edu>
Subject: Re: Can the MDA add entity attributes?




On 16 Sep 2024, at 17:29, Wessel, Keith via users <users at shibboleth.net> wrote:

Seems like a logical test, Ian. I just tried it and, sure enough when I don't add any entity attributes, the transform right after the disassemble stage and signing at the end results in a valid signature.

So, sounds like you nailed this one. I'll keep my workaround of doing a transform just before signing (or any time after adding entity attributes) until the release of 1.0.0 when I can drop the explicit transform.

Thanks for taking the time to do this, I really appreciate it. Confirming my working understanding of the problem is really useful, particularly as it confirms that what we already have will address the issue across the board for 1.0.0.

Onwards and upwards,

    -- Ian



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240919/5284ffd0/attachment.htm>