Hello,<div><br></div><div>I would like to configure our SP for authentication and also attribute retrieval. A user would authenticate and upon successful authentication the web server would have access to some additional attributes.</div>
<div><br></div><div>So far I have configured shibboleth2.xml and metadata file to work with our IdP and provide authentication. I am now looking to configure these two files so that I can retrieve attributes. Do I need to create a new entity ID in order to retrieve attributes? The virtual host for both authentication and retrieval of attributes is the same. If I need an additional entity ID, could I rely on the second example from NativeSPApplication page: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication</a> ?</div>
<div><br></div><div>For metadata configuration I am referencing this guide: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataForSP#MetadataForSP-AssertionConsumerServices">https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataForSP#MetadataForSP-AssertionConsumerServices</a> . I understand that I would need to manually create entries like this in the metadata. How would I know the Name and NameFormat that I would need to reference?</div>
<div> </div><div><span class="Apple-style-span" style="color: rgb(51, 51, 51); font-family: Helvetica, Arial, sans-serif; font-size: 13px; line-height: 17px; background-color: rgb(255, 255, 255); "><pre class="code-xml" style="padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; text-align: left; overflow-x: auto; overflow-y: auto; font-family: 'Courier New', Courier, monospace; line-height: 1.3; ">
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:AttributeConsumingService index=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"1"</span>></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:ServiceName xml:lang=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"en"</span>></span>Sample Service<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "></md:ServiceName></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:ServiceDescription xml:lang=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"en"</span>></span>An example service that requires a human-readable identifier and optional name and e-mail address.<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "></md:ServiceDescription></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:RequestedAttribute FriendlyName=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"eduPersonPrincipalName"</span> Name=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:mace:dir:attribute-def:eduPersonPrincipalName"</span> NameFormat=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:mace:shibboleth:1.0:attributeNamespace:uri"</span>/></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:RequestedAttribute FriendlyName=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"mail"</span> Name=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:mace:dir:attribute-def:mail"</span> NameFormat=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:mace:shibboleth:1.0:attributeNamespace:uri"</span>/></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:RequestedAttribute FriendlyName=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"displayName"</span> Name=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:mace:dir:attribute-def:displayName"</span> NameFormat=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:mace:shibboleth:1.0:attributeNamespace:uri"</span>/></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:RequestedAttribute FriendlyName=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"eduPersonPrincipalName"</span> Name=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:oid:1.3.6.1.4.1.5923.1.1.1.6"</span> NameFormat=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:oasis:names:tc:SAML:2.0:attrname-format:uri"</span>/></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:RequestedAttribute FriendlyName=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"mail"</span> Name=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:oid:0.9.2342.19200300.100.1.3"</span> NameFormat=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:oasis:names:tc:SAML:2.0:attrname-format:uri"</span>/></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><md:RequestedAttribute FriendlyName=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"displayName"</span> Name=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:oid:2.16.840.1.113730.3.1.241"</span> NameFormat=<span class="code-quote" style="color: rgb(0, 145, 0); background-color: inherit; ">"urn:oasis:names:tc:SAML:2.0:attrname-format:uri"</span>/></span>
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "></md:AttributeConsumingService></span></pre><pre class="code-xml" style="padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; text-align: left; overflow-x: auto; overflow-y: auto; font-family: 'Courier New', Courier, monospace; line-height: 1.3; ">
<span class="code-tag" style="color: rgb(0, 0, 145); background-color: inherit; "><br></span></pre></span></div><div><br></div><div>Thank you for your help,</div><div>Tonu</div><div><div><br></div>-- <br><span style="border-collapse:collapse;font-family:arial, sans-serif;font-size:13px"><div>
Tonu Mikk</div><div>Disability Services, Office for Equity and Diversity</div><div>612 625-3307</div><div><a href="mailto:tmikk@umn.edu" target="_blank">tmikk@umn.edu</a></div></span><br>
</div>