Changes between Version 9 and Version 10 of IdPSetup


Ignore:
Timestamp:
04/01/13 14:55:09 (12 years ago)
Author:
dabantz@…
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • IdPSetup

    v9 v10  
    4242If the data connector encounters an error when trying to retrieve attribute information from the database, one or more failover data connectors can be defined. These connectors are only invoked if this data connector fails (not if simply finds no results) and they are invoked in the order they are listed until one succeeds. 
    4343 
    44 N.B.: if the !DataConnector as a whole fails, UA experience has been that the attribute resolution process aborts and the SAML assertion has no attributes.  A possible more robust solution is to define a failover "static data connector" that will return no attributes or static-value attributes, bu not abort the attribute resolver. 
     44N.B.: if the !DataConnector as a whole fails, UA experience has been that the attribute resolution process aborts and the SAML assertion has no attributes.  A possible more robust solution is to define a failover "static data connector" that will return no attributes or static-value attributes, but not abort the attribute resolver. 
    4545 
    4646Failover connectors are defined by the <resolver:FailoverDataConnector> element with a ref attribute whose value is the unique ID of the data connector to use in the event that this one fails. 
     
    5151                                          id="UNIQUE_ID"> 
    5252 ... 
    53      <resolver:FailoverDataConnector ref="CONNECTOR_ID_1" /> 
     53     <resolver:FailoverDataConnector ref="FailoverStaticConnector" /> 
    5454 ... 
    5555  
     
    5858Basic Format of Static Data Connector 
    5959{{{ 
    60 <resolver:DataConnector id="UniqueConnectorID" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc"> 
    61      <Attribute id="AttributeID1"> 
    62           <Value>value1</Value> 
     60<resolver:DataConnector id="FailoverStaticConnector" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc"> 
     61     <Attribute id="uausername"> 
     62          <Value>nobody</Value> 
    6363     </Attribute> 
    64      <Attribute id="AttributeID2"> 
    65           <Value>valueA</Value> 
    66           <Value>valueB</Value> 
     64     <Attribute id="eduPersonAffiliation"> 
     65          <Value>affiliate</Value> 
     66          <Value>member</Value> 
    6767     </Attribute> 
    6868</resolver:DataConnector>