Hi Janusz,
Are there some isRequired attributes in the metadata of the calling sp?
Attr name format is uri, isn't It?
You can even increase debug level for pysaml2 internals, where happens
filters, see this
https://github.com/IdentityPython/pysaml2/blob/d655fc924af5ddd56a51d1e6bb41…
That's a good point where to put a debugger or increase logging level,
there you'll find what you're lookin for, explicitly
Il lun 20 lug 2020, 23:52 Janusz Ulanowski <janusz.ulanowski at heanet.ie> ha
scritto:
Hi,
I'm having few issues and hopefully you might provide some light
saml to saml scenario.
I wanted to add custom attribute:
I added that attribute to saml_uri.py
'fro': { 'urn:mace:heanet.ie:custom:tenantid':
'customtenantid',
... },
'to': { 'customtenantid':
'urn:mace:heanet.ie:custom:tenantid',
... }
then internal_attributes.yaml :
added:
customtenantid:
saml: [customtenantid, urn:mace:heanet.ie:custom:tenantid]
in saml2_frontend.yaml policy is set to allow release everything:
policy:
default:
attribute_restrictions: null
however: logs say:
///////////////
xx | [2020-07-20 20:59:47,604] [DEBUG]
[satosa.frontends.saml2._get_approved_attributes]
[urn:uuid:244a93be-a61e-4e5f-8508-c293a24f832d] Filter: ['name',
'schacHomeOrganization', 'edupersontargetedid', 'givenname',
'eppn',
'organizationName', 'mail', 'displayname', 'surname']
//////////////
where does that filter come from if I have set not restriction .
Is it only way to add a custom atribute ?
thanks in advance,
Janusz
_______________________________________________
satosa-users mailing list
satosa-users at lists.sunet.se
https://lists.sunet.se/listinfo/satosa-users
--
------------------------------------------------------------------------------------------------------------------
Il banner è generato automaticamente dal servizio di posta elettronica
dell'Università della Calabria
<https://www.unical.it/portale/portaltemplates/view/view.cfm?100061>