<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;
panose-1:2 11 6 9 3 8 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>Hello fellow shibboleth users,<o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'> <o:p></o:p></span></p><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>I am looking for a bit of guidance around setting up the CAS protocol to leverage metadata instead of cas-protocol.xml regular expressions. <o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><o:p> </o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>I have read <o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><a href="https://wiki.shibboleth.net/confluence/display/SC/CASMetadataProfile">https://wiki.shibboleth.net/confluence/display/SC/CASMetadataProfile</a> <o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>& <o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><a href="https://wiki.shibboleth.net/confluence/display/IDP30/CASServiceSAMLMetadata">https://wiki.shibboleth.net/confluence/display/IDP30/CASServiceSAMLMetadata</a><o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>several times. Yet I feel I must be missing some piece to the puzzle. As all of my tests end up sending the request through as an UnverifiedRelyingParty.<o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><o:p> </o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>I am using the docker image </span><span style='font-size:9.0pt;font-family:Menlo;color:black'>tier</span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy'>/</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black'>shib-idp:</span><span style='font-size:9.0pt;font-family:Menlo;color:blue'>3.4.6</span><span style='font-size:9.0pt;font-family:Menlo;color:black'>_20191002 for my setup. I have gone through many iterations but the most recent is below. I greatly appreciate any feedback.<o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black'><o:p> </o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black'>Thanks,<o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black'>--David<o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black'><o:p> </o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black'><!—- from metadata-providers.xml --><o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><</span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>MetadataProvider </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>id=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"IMSCASSP"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>xsi</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>:type=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"FileBackedHTTPMetadataProvider"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>backingFile=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"%{idp.home}/metadata/local-castest-metadata.xml"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>metadataURL=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://www.iu.edu/~imsteam/univ-idp/dev/ims-cas-services-metadata.xml"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>indexesRef=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"shibboleth.CASMetadataIndices"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'><</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>MetadataFilter </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>xsi</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>:type=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"EntityRoleWhiteList"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'><</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>RetainedRole</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'>SPSSODescriptor<span style='background:#EFEFEF'></</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>RetainedRole</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'></</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>MetadataFilter</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br><span style='background:#EFEFEF'></</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>MetadataProvider</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><o:p></o:p></span></pre><pre style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black'><o:p> </o:p></span></pre><p class=MsoNormal style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><!-- local-castest-metadata.xml --><o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'><</span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:EntityDescriptor </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>xmlns:</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"urn:oasis:names:tc:SAML:2.0:metadata" </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>ID=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"085934d90c20659e68de1af3dca8d11cc4c0d74dada1" </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>entityID=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://alpha.example.org/"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'><</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:SPSSODescriptor </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>protocolSupportEnumeration=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://www.apereo.org/cas/protocol"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'><</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:AssertionConsumerService<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>Binding=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://www.apereo.org/cas/protocol/login"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>Location=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://alpha.example.org/"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>index=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"1"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>/></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'><</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:AssertionConsumerService<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>Binding=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://www.apereo.org/cas/protocol/login"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>Location=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://alpha.dev.example.org/"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>index=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"2"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>/></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'><</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:SingleLogoutService<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>Binding=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"https://www.apereo.org/cas/protocol/logout"<br> </span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:blue;background:#EFEFEF'>Location=</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:green;background:#EFEFEF'>"urn:mace:shibboleth:profile:CAS:logout"</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>/></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br> <span style='background:#EFEFEF'></</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:SPSSODescriptor</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><br><span style='background:#EFEFEF'></</span></span><b><span style='font-size:9.0pt;font-family:Menlo;color:#660E7A;background:#EFEFEF'>md</span></b><b><span style='font-size:9.0pt;font-family:Menlo;color:navy;background:#EFEFEF'>:EntityDescriptor</span></b><span style='font-size:9.0pt;font-family:Menlo;color:black;background:#EFEFEF'>></span><span style='font-size:9.0pt;font-family:Menlo;color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>J. David Bickel<o:p></o:p></span></b></p><p class=MsoNormal style='margin-top:.75pt'><span style='font-size:8.5pt;font-family:"Arial",sans-serif'>Indiana University<o:p></o:p></span></p><p class=MsoNormal style='margin-top:.75pt'><span style='font-size:8.5pt;font-family:"Arial",sans-serif'>Identity Management Systems<o:p></o:p></span></p><p class=MsoNormal style='margin-top:.75pt'><span style='font-size:8.5pt;font-family:"Arial",sans-serif'>2709 E 10th Street<o:p></o:p></span></p><p class=MsoNormal style='margin-top:.75pt'><span style='font-size:8.5pt;font-family:"Arial",sans-serif'>Bloomington, IN 47408 <o:p></o:p></span></p><p class=MsoNormal style='margin-top:.75pt'><span style='font-size:8.5pt;font-family:"Arial",sans-serif'>812-855-6346 <o:p></o:p></span></p><p class=MsoNormal style='margin-top:.75pt'><span style='font-size:8.5pt;font-family:"Arial",sans-serif'><a href="mailto:jdbickel@iu.edu" target="_top"><span style='color:#0563C1'>jdbickel@iu.edu</span></a> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><img border=0 width=275 height=80 style='width:2.8645in;height:.8333in' id="Picture_x0020_1" src="cid:image001.png@01D593D6.57727160" alt=indiana-university-logo><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>