<div dir="ltr">When I upgraded to 4.1 I found that I had to add the following to subject-c14n.properties:<div><br></div><div># Lists of attributes to resolve...<br>idp.c14n.attribute.attributesToResolve = canonicalNameToUseForJoin<br># and then select a principal name from<br>idp.c14n.attribute.attributeSourceIds = canonicalNameToUseForJoin<br></div><div><br></div><div>I used the same proxying guide and my attribute-sourced-subject-c14n-config.xml looked just like the example, before I upgraded it to 4.1.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Apr 17, 2023 at 4:55 PM Dave Perry via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg8899187883930761928">
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
Hi all</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
I have followed the cookbook on this, and have the flow redirecting to Azure, then back with a correct set of details for my login (according to the debug level of idp-process). Now I have hit a different snag.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
When configuring the c14 part of the Proxy Tasks, it notes you need to put a few lines in attribute-sourced-subject-c14n-config.xml - but that errors as it can't find a definition for util:list. Noting that it says the document hasn't been updated for v4.1+ (was
running 4.3.0 when I started this, but have now updated to 4.3.1 last week like a good deployer), I looked at this page (signposted at the bottom of the Idp/Azure cookbook):<br>
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631602/AttributePostLoginC14NConfiguration" id="m_-5489216796184348360LPlnk352884" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631602/AttributePostLoginC14NConfiguration</a><br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
There is no mention of what I need to configure in subject-c14n.properties. Is anyone, who has made this work, willing to share what they put in that file? There may be more questions still, but I thought I should try to do all the steps before asking for more
help.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
(I have not setup the section about refeds/mfa, as we aren't using that as far as I know)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
When checking the process log, as it checks against each Attribute Filter, it is showing a request value of the IdP's entityID. I'm not clear why it has seemingly 'lost' the original resource URL requested, or that the cookbook mentions how to correct this.<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255)">
TIA</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_-5489216796184348360Signature">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<span style="font-size:10pt">_________________________________________________</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<span style="font-size:10pt"></span></div>
<table style="border-collapse:collapse;border:none">
<tbody>
<tr style="height:96.45pt">
<td width="405" valign="top" style="width:303.75pt;padding:0cm 5.4pt;height:96.45pt">
<p style="margin:0cm;line-height:120%;font-size:11pt;font-family:Calibri,sans-serif">
<a><b><span style="font-size:10pt;font-family:Arial,sans-serif">Dave Perry</span></b></a><span><span style="font-size:12pt;font-family:"Times New Roman",serif"><br>
</span></span><span><span style="font-size:9pt;font-family:Arial,sans-serif">Application Analyst<span> </span><b>|<span>
</span></b>Innovation & Technology Services<br>
<br>
</span></span><span><span style="font-size:9pt;font-family:Arial,sans-serif">York St John University<u></u> <u></u></span></span></p>
<p style="margin:0cm;line-height:120%;font-size:11pt;font-family:Calibri,sans-serif">
<span><span style="font-size:9pt;font-family:Arial,sans-serif">Lord Mayor’s Walk, York, YO31 7EX</span></span><span><span style="font-size:9pt;font-family:Arial,sans-serif"><br>
T: +44(0)1904 876 0000<br>
</span></span><a href="mailto:email@yorksj.ac.uk" target="_blank"><span><span style="font-size:9pt;font-family:Arial,sans-serif">email@yorksj.ac.uk</span></span></a><span><span style="font-size:9pt;font-family:Arial,sans-serif"><span>
</span><b>|<span> </span></b></span></span><a href="http://www.yorksj.ac.uk" target="_blank"><span><span style="font-size:9pt;font-family:Arial,sans-serif">www.y</span></span><span><span style="font-size:9pt;font-family:Arial,sans-serif">orksj</span></span><span><span style="font-size:9pt;font-family:Arial,sans-serif">.ac.uk</span></span></a><span style="font-size:9pt;font-family:Arial,sans-serif"><u></u> <u></u></span></p>
</td>
</tr>
<tr style="height:74.7pt">
<td width="405" valign="top" style="width:303.75pt;padding:0cm 5.4pt;height:74.7pt">
<p style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif">
<b><span style="font-size:12pt;font-family:Arial,sans-serif"><u></u><img style="max-width: 100%;" src="cid:18791454b9aca5b316d1"> <u></u></span></b></p>
</td>
</tr>
</tbody>
</table>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<span style="font-size:10pt"></span></div>
</div>
</div>
</div>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Tony Skalski (he/him/his)</b></div><div dir="ltr">System Administrator | IT</div><div dir="ltr">Office:<b> </b><a href="tel:(507)786-3227" target="_blank">507-786-3227</a><br></div><div dir="ltr">1510 St. Olaf Avenue Northfield, MN 55057</div><div dir="ltr"><a href="http://stolaf.edu" target="_blank">stolaf.edu</a></div><div><div><br><br></div></div></div></div></div></div></div></div></div></div>