<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>I am tasked with documenting our Shibboleth SP configuration so that other institutions can replicate our work. What, if any, elements in the shibboleth2.xml or attribute-map.xml files should I consider sensitive enough to redact before publishing them?
Nothing stuck out at me as particularly sensitive, other than maybe the ACL list for the 'Status' handler' in shibboleth2.xml. Did I miss anything?</div>
<div><br>
</div>
<div>I assume there is nothing in the SP metadata to worry about. That information gets published by InCommon as part of the production metadata aggregate, so it's available to anyone with an Internet connection anyway.</div>
<div><br>
</div>
<div>--Ken</div>
<div><br>
</div>
<div>
<div>
<div style="font-family: Consolas; font-size: medium; ">------------------------------------------------------------</div>
<div style="font-family: Consolas; font-size: medium; ">Ken Weiss <a href="mailto:ken.weiss@ucop.edu">ken.weiss@ucop.edu</a></div>
<div style="font-family: Consolas; font-size: medium; ">UC Office of the President 510-587-6311 (office)</div>
<div style="font-family: Consolas; font-size: medium; ">California Digital Library 916-905-6933 (mobile)</div>
<div style="font-family: Consolas; font-size: medium; ">UC Curation Center</div>
<div style="font-family: Consolas; font-size: medium; ">415 20th Street, 4th Floor</div>
<div style="font-family: Consolas; font-size: medium; ">Oakland, CA 94612</div>
</div>
<div><br>
</div>
</div>
</body>
</html>