<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="SV" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">We are trying to integrate your service provider into our product and ran into a mismatch bewteen the documentation and the actual functionality.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We have a cloud service and are setting up an SP and we want to support all the IdP's of our customers. In our setup we use our current login page and check for an enityID in the query string to see if the user wants
to use SSO and which IdP will provide the identity.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Since not all IdP's supply their attributes in the same way we want to be able to have a separate attribute map for each IdP. I tried to configure this by specifying applicationId's in shibboleth2.xml at <RequestMap>
(see below). After some testing I realized that the <RequestMap> and <Host> with an applicationId attribute DO work, but <Path> and <Query> DO NOT work. According to the documentation, they are supposed to (https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRequestMapQuery)
at "Content Settings": "XML attributes corresponding to request mapper properties are used".<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><RequestMap applicationId="default"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><Host name="local-secure.reqtest.com"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><Path name="Login.aspx" authType="shibboleth" requireSession="false"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><Query name="entityID" regex="^mujina\.reqtest\.local$" applicationId="mujina"/><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><Query name="entityID" regex="^https://idp\.testshib\.org/idpshibboleth$" applicationId="testShib" /><o:p></o:p></span></p>
<p class="MsoNormal"></Path><o:p></o:p></p>
<p class="MsoNormal"></Host><o:p></o:p></p>
<p class="MsoNormal"></RequestMap><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">We are using Windows server 2008 R2, IIS 7 and Jetty 7.<o:p></o:p></span></p>
</div>
</body>
</html>