<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks Scott, this is helpful.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
A follow-up question, if I add an "EntityAttribute" in the metadata. How can I get that attribute from duo-authn-config.xml, specifically, "DuoIntegrationStrategy"?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0"><span id="ms-rterangepaste-start"></span></p>
<pre class="moz-signature" cols="72">Zunan Dong</pre>
<pre class="moz-signature" cols="72">Authentication Systems Specialist</pre>
<pre class="moz-signature" cols="72">Information Security
Information Technology Service
University of Toronto
Email: zunan.dong@utoronto.ca</pre>
<span id="ms-rterangepaste-end"></span><br>
<p style="margin-top: 0px; margin-bottom: 0px;"></p>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Thursday, 24 September 2020 12:05<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: Map entityID to Duo Application Profile</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">EXTERNAL EMAIL: Treat content with extra caution.<br>
<br>
On 9/24/20, 11:18 AM, "users on behalf of Zunan Dong" <users-bounces@shibboleth.net on behalf of zunan.dong@utoronto.ca> wrote:<br>
<br>
> Currently, we use "DuoIntegrationMap" in duo-authn-config.xml to map entityID with Duo application profile. Every<br>
> time we add a new entry to the map, we need to restart IdP to apply the change. Is there any way that can map an<br>
> entityID to an existing Duo application profile bean without restarting IdP(The change will be applied dynamically)?<br>
<br>
Same answer I gave the other day: stop doing it that way and switch to using an EntityAttribute in the metadata as a tag to trigger a Predicate or Function that would produce the right answer.<br>
<br>
A function-based approach that needs to care what the value of the EntityAttribute is is more complex than a condition/predicate just evaluating whether a value is true. Given that you probably have few integrations with Duo for this, a few predicates testing
for a few values and then a simple if/else sequence in a script is probably good enough.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>