Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
Last revisionBoth sides next revision
en:aai:mdq [2021/07/14 13:57] – Silke Meyeren:aai:mdq [2023/01/12 19:31] – [Shibboleth IdP 4.x] Wolfgang Pempe
Line 21: Line 21:
 **Certificate for the validation of the signature of DFN-AAI MDQ Metadata** (PEM format) \\ **Certificate for the validation of the signature of DFN-AAI MDQ Metadata** (PEM format) \\
 SHA256 Fingerprint: 73:5B:9E:76:8A:A6:33:73:4D:3E:C6:D2:1E:98:B3:D9:03:74:B9:87:16:52:16:53:32:26:9A:B2:55:FC:CA:D2 \\ SHA256 Fingerprint: 73:5B:9E:76:8A:A6:33:73:4D:3E:C6:D2:1E:98:B3:D9:03:74:B9:87:16:52:16:53:32:26:9A:B2:55:FC:CA:D2 \\
-https://www.aai.dfn.de/fileadmin/metadata/dfn-aai-mdq.pem +https://www.aai.dfn.de/metadata/dfn-aai-mdq.pem 
  
 ===== Examples ===== ===== Examples =====
Line 49: Line 49:
 </file> </file>
  
-We are happy to document further filter mechanisms [[hotline@aai.dfn.de|on demand]]. 
  
 ==== Shibboleth SP 3.2.x ==== ==== Shibboleth SP 3.2.x ====
Line 65: Line 64:
                   baseUrl="https://mdq.aai.dfn.de">                   baseUrl="https://mdq.aai.dfn.de">
            <MetadataFilter type="Signature" certificate="/etc/ssl/aai/dfn-aai-mdq.pem"/>            <MetadataFilter type="Signature" certificate="/etc/ssl/aai/dfn-aai-mdq.pem"/>
-    </MetadataProvider> 
-</file> 
- 
-=== Filter IdPs from DFN-AAI Advanced === 
-(see [[en:degrees_of_reliance|Degrees of Reliance]]) 
- 
-**Important:** In ''shibboleth2.xml'', in the root element ''SPConfig'' the namespace ''xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"'' has to be set for this filter to work. 
- 
-<file xml /etc/shibboleth/shibboleth2.xml> 
-    <MetadataProvider type="MDQ" id="dfn_aai_mdq_advanced_only" ignoreTransport="true" 
-                  cacheDirectory="mdq-aai-dfn-de" 
-                  maxCacheDuration="3600" minCacheDuration="600" 
-                  baseUrl="https://mdq.aai.dfn.de"> 
-           <MetadataFilter type="Signature" certificate="/etc/ssl/aai/dfn-aai-mdq.pem"/> 
-           <MetadataFilter type="Include" matcher="EntityAttributes"> 
-               <saml:Attribute Name="http://aai.dfn.de/loa/degree-of-reliance" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> 
-                 <saml:AttributeValue>advanced</saml:AttributeValue> 
-               </saml:Attribute> 
-           </MetadataFilter> 
     </MetadataProvider>     </MetadataProvider>
 </file> </file>
  • Last modified: 3 months ago