[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: Associating SP users with specific IdPs
From:       Peter Schober <peter.schober () univie ! ac ! at>
Date:       2013-03-25 10:58:22
Message-ID: 20130325105822.GB18765 () aco ! net
[Download RAW message or body]

* Robert Lowe <robertmlowe@rmlowe.com> [2013-03-25 11:43]:
> > > Okay, from my reading of the spec I understand that both
> > > NameQualifier and SPNameQualifier are optional. I also get the
> > > impression that they are rarely used—that is, I don't believe I
> > > have ever seem them used either in examples/documentation, or
> > > "in the wild."
> > 
> > Well, besides those being used (like Tom said), the software can infer
> > both values from the protocol messages in the sinple case where all
> > qualifiers have their default values (NQ = IdP; SPNQ = SP).
> 
> By "the software" you mean the SP rather than the application,
> right?

Yes

> Does that happen automatically or is some configuration needed?

defaultQualifiers defaults to "false", can be enabled by setting to "true":
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeDecoder#NativeSPAttributeDecoder-NameIDAttributeDecoder
                
-peter
--
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net


[prev in list] [next in list] [prev in thread] [next in thread]