Skip to Content.
Sympa Menu

shibboleth-dev - Metadata, SP elements, specifying requested elements

Subject: Shibboleth Developers

List archive

Metadata, SP elements, specifying requested elements


Chronological Thread 
  • From:
  • To:
  • Subject: Metadata, SP elements, specifying requested elements
  • Date: Mon, 13 Nov 2006 11:10:30 -0500

I've been playing some with the AttributeConsumingService that is available within the SPSSODescriptor element, and beginning to wonder how tools such as WebShARPE could leverage this element...

Here's a sample that I've developed -- it contains three different AttributeConsumingService elements (which I've arbitrarily tagged as different Service Levels).

Is this how people were expecting that this element would be used?

<EntityDescriptor entityID="https://attribute-test.cis.brown.edu/shibboleth";>

<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<KeyDescriptor>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<ds:KeyName>stc-test8.cis.brown.edu</ds:KeyName>
</ds:KeyInfo>
</KeyDescriptor>
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://stc-test8.cis.brown.edu/Shibboleth.sso/SAML/POST"; index="0"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://stc-test8.cis.brown.edu/Shibboleth.sso/SAML/Artifact"; index="1"/>

<AttributeConsumingService index="0" isDefault="true" >
<ServiceName xml:lang="en">Shibboleth Wiki - Bronze Level</ServiceName>
<ServiceDescription xml:lang="en">Wiki containing Shibboleth support and documentation materials</ServiceDescription>
<RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonEntitlement" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"
FriendlyName="eduPersonEntitlement" isRequired="true">
<AttributeValue xmlns="urn:oasis:names:tc:SAML:2.0:assertion">foo</AttributeValue>
</RequestedAttribute>
</AttributeConsumingService>

<AttributeConsumingService index="0" >
<ServiceName xml:lang="en">Shibboleth Wiki - Silver Level</ServiceName>
<ServiceDescription xml:lang="en">Wiki containing Shibboleth support and documentation materials</ServiceDescription>
<RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"
FriendlyName="eduPersonPrincipalName" isRequired="true"/>
</AttributeConsumingService>

<AttributeConsumingService index="0" >
<ServiceName xml:lang="en">Shibboleth Wiki - Gold level</ServiceName>
<ServiceDescription xml:lang="en">Wiki containing Shibboleth support and documentation materials</ServiceDescription>
<RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"
FriendlyName="eduPersonPrincipalName" isRequired="true"/>
<RequestedAttribute Name="urn:mace:dir:attribute-def:email" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"
FriendlyName="email" isRequired="true"/>
</AttributeConsumingService>

</SPSSODescriptor>

</EntityDescriptor>




Archive powered by MHonArc 2.6.16.

Top of Page