<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello all,<br>
<br>
We have been deploying SPs on campus using a federation approach.
As such we use AttributeRequesterInEntityGroup in our
attribute-filter.xml file for attributes we send to all servers. We
are currently deploying a SP which is part of our federation but do
not want to send it our standard attributes. I have tried two
approaches to the problem but both seem to give me errors.<br>
<br>
First approach change attribute-filter.xml to<br>
<br>
<PolicyRequirementRule xsi:type="basic:AND"><br>
<basic:Rule
xsi:type="basic:AttributeRequesterInEntityGroup"
groupID=<a class="moz-txt-link-rfc2396E" href="https://fdu.edu/metadata/federated-fdu.xml">"https://fdu.edu/metadata/federated-fdu.xml"</a> /><br>
<basic:Rule xsi:type="basic:NOT"><br>
<basic:Rule xsi:type="basic:AttributeRequesterString"
value=<a class="moz-txt-link-rfc2396E" href="https://test.fdu.edu/shibboleth-sp">"https://test.fdu.edu/shibboleth-sp"</a> /><br>
</basic:Rule><br>
</PolicyRequirementRule><br>
<br>
Second approach change our metadata file to have two
<EntitiesDescriptor>. Rather than create a separate metadata
file for this host, I would rather use two
<EntitiesDescriptor> it creates a manageable solutions that
can be reused in the future.<br>
<br>
metadata.xml<br>
<br>
<?xml version="1.0" encoding="UTF-8"?><br>
<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"<br>
Name=<a class="moz-txt-link-rfc2396E" href="https://fdu.edu/metadata/federated-fdu.xml">"https://fdu.edu/metadata/federated-fdu.xml"</a><br>
xmlns:ds=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a><br>
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"<br>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>><br>
<EntityDescriptor><br>
....<br>
</EntityDescriptor><br>
</EntitiesDescriptor><br>
<EntitiesDescriptor<br>
xmlns="urn:oasis:names:tc:SAML:2.0:metadata"<br>
Name=<a class="moz-txt-link-rfc2396E" href="https://fdu.edu/metadata/other-fdu.xml">"https://fdu.edu/metadata/other-fdu.xml"</a><br>
xmlns:ds=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a><br>
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"<br>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>><br>
<EntityDescriptor><br>
....<br>
</EntityDescriptor><br>
</EntitiesDescriptor><br>
<br>
I would appreciate any feedback as well as feasibility of my
approaches<br>
<br>
Thank you in advance,<br>
<br>
-Chris<br>
<div class="moz-signature">-- <br>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<title>OIRT Signature</title>
<style media="all" type="text/css">
#sig{
margin:6px 0 0 15px;
padding:6px;
width: 530px;
}
#sig .person{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:12px;
font-style:italic;
color:#333333;
font-weight: bolder;
padding: 0 0 0 15px;
}
#sig .title{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:10px;
font-style:italic;
color:#333333;
padding: 0 0 0 15px;
letter-spacing: .1em;
line-height: 10px;
}
#sig .row {
line-height:12px;
color:#333333;
padding-top: 13px;
padding: 10px 0 0 15px;
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 10px;
}
#sig .top {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding:7px 0 0 0;
font-weight: bolder;
}
#sig .toptwo {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding-left: 120px;
font-weight: bolder;
}
#sig .row a:link, .row avisited {
color:#5CBDBF;
text-decoration:none;
}
#sig .row a:over{
color:#333333;
border: 1px black dotted;
}
</style>
<div id="sig"><br>
</div>
</div>
</body>
</html>