1:13 p.m.
Hey all,
Do either of these configuration settings have any purpose? If these
are hold-overs from when SATOSA used to generate its own metadata, can
we safely remove them from the example configuration?
Best wishes,
Matthew
--
"The lyf so short, the craft so longe to lerne."
8:28 a.m.
New subject: organization and contact_person in the SAML2 frontend/backend configs
Hi Matthew,
These will be exposed in front and backend SAML metadata for the
endpoints once you generate metadata with
$SATOSA_ENV/bin/satosa-saml-metadata.
Actually I am thinking about extending the metadata definition and
creation capabilities a bit as the current metadata that gets generated
out of this is a bit sparse and does not comply to e.g. eduGAIN. Also
e.g. adding R&S through config would be nice.
Niels
On 18-02-18 14:13, Matthew X. Economou wrote:
Hey all,
Do either of these configuration settings have any purpose? If these
are hold-overs from when SATOSA used to generate its own metadata, can
we safely remove them from the example configuration?
Best wishes,
Matthew
--
Niels van Dijk Technical Product Manager Trust & Security
Mob: +31 651347657 | Skype: cdr-80 | PGP Key ID: 0xDE7BB2F5
SURFnet BV | PO.Box 19035 | NL-3501 DA Utrecht | The Netherlands
www.surfnet.nl www.openconext.org
9:46 a.m.
New subject: organization and contact_person in the SAML2 frontend/backend configs
Hi all,
Anything that is under sp_config or idp_config is not a SATOSA
configuration option, but a pysaml2 configuration option.
Actually I am thinking about extending the metadata
definition and
creation capabilities a bit as the current metadata that gets generated
out of this is a bit sparse and does not comply to e.g. eduGAIN. Also
Do open an issue and describe what you'd like and we can pick it up as
things progress.
e.g. adding R&S through config would be nice.
right now, if you add this configuration:
sp_config:
entity_category:
- http://www.swamid.se/category/research-and-education
- http://www.bar.se/category/foo
you get back:
[...]
<ns0:Extensions>
<ns1:EntityAttributes>
<ns2:Attribute Name="http://macedir.org/entity-category"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<ns2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xsi:type="xs:string">http://www.swamid.se/category/research-and-education</ns2:AttributeValue>
<ns2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xsi:type="xs:string">http://www.bar.se/category/foo</ns2:AttributeValue>
</ns2:Attribute>
</ns1:EntityAttributes>
</ns0:Extensions>
[...]
Cheers,
--
Ivan c00kiemon5ter Kanakarakis >:3
2280
days inactive
2281
days old
2 comments
3 participants
participants (3)
-
ivan.kanak＠gmail.com -
niels.vandijk＠surfnet.nl -
xenophon＠irtnog.org