<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Greetings fellow Shibboleth users and admins,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">At Towson University, we too have recently integrated with SalesForce SSO. This integration includes one instance of production, as well as three different sandbox environments (DEV/TEST/QA). I’ve found that maintaining this data in Shibboleth’s
configuration file has become rather onerous when things change, or environments refresh. All of these environments have very similar settings and EntityIDs on the Shibboleth side.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is there any way I can “Wildcard” how Shibboleth treats certain EntityIDs in configuration files such as relying-party, or perhaps attribute-filter for attribute release? I can see how it might not make sense in relying-party, since you
generally need to link to specific metadata per SP. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It would be useful to be able to “match” an EntityID pattern for things like attribute release, rather than have them each listed out separately (which requires a lot of modification when our SalesForce EntityIDs change for upgrades, etc).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Obviously it’s not the end of the world if there’s no way to do it, but as we continue to add SPs, we’re looking for better ways to organize and manage our configurations.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance for any replies.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-Andy<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;color:#595959">Andy Martin<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#595959">Systems Developer<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#595959">Architecture and Identity Services<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#595959">Office of Technology Services<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#595959">Towson University<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#595959">410-704-4591<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>