Changes between Version 3 and Version 4 of R&Ssupport
- Timestamp:
- 07/09/12 16:52:53 (12 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
R&Ssupport
v3 v4 1 1 == Configuring a Shibboleth IdP to Release Attributes to an R&S SP == 2 2 ''Copied from [[https://spaces.internet2.edu/display/InCCollaborate/Configure+a+Shibboleth+IdP+to+Release+Attributes+to+an+R+and+S+SP|I2 wiki re R&S InCommon SPs]] 2012.05.14''[[br]][[br]] 3 3 Configuring a Shibboleth IdP to Release Attributes to an R&S SP 4 4 IdP 2.3.5 and above … … 14 14 An IdP can choose between possible configurations, depending on its policy needs: 15 15 16 Always release the same set of attributes to every R&S SP.17 Release only those attributes an SP requests via its metadata element.16 1. Always release the same set of attributes to every R&S SP. 17 2. Release only those attributes an SP requests via its metadata element. 18 18 19 == Always Release the Same Set of Attributes==19 === Always Release the Same Set of Attributes === 20 20 21 21 The following configuration requires Shibboleth IdP v2.3.5 or later, which fully supports using entity attributes in SP metadata as part of an attribute release filter policy. … … 49 49 }}} 50 50 51 Release Only Those Attributes an SP Requests via Its Metadata Element 51 === Release Only Those Attributes an SP Requests via Its Metadata Element === 52 52 This approach relies on a plugin that is bundled with the uApprove add-on for Shibboleth. Information about uApprove is available at http://www.switch.ch/aai/support/tools/uApprove.html. It is NOT necessary for the site to run and use uApprove in order to take advantage of this plugin's capabilities. 53 53 54 == Installation of the Plugin:==54 === Installation of the Plugin: === 55 55 Follow these steps in order to use the plugin; it is NOT necessary to follow the full uApprove installation instructions: 56 56 57 Download the uApprove package. 58 Explode the package. 59 (FIX) cp uApprove-2.2.1/idp-plugin-2.2.1/lib/* shibboleth-identityprovider-2.3.5/lib/. 60 Run the standard IDP install steps (eg install.sh) 61 Configure a Release Policy 57 1. Download the uApprove package. 58 2. Explode the package. 59 3. (FIX) cp uApprove-2.2.1/idp-plugin-2.2.1/lib/* shibboleth-identityprovider-2.3.5/lib/. 60 4. Run the standard IDP install steps (eg install.sh) 61 62 === Configure a Release Policy === 62 63 The following IdP configuration implicitly releases attributes to any R&S SP. An attribute is released if and only if it is listed in SP metadata. 63 64