Dokumentation DFN-AAI, DFN-PKI und eduroam - de:shinidp
https://doku.tid.dfn.de/
2026-04-08T16:42:54+00:00
Dokumentation DFN-AAI, DFN-PKI und eduroam
https://doku.tid.dfn.de/
https://doku.tid.dfn.de/_media/logo.png
-
text/html
2025-07-03T08:45:01+00:00
Anonymous (anonymous@undisclosed.example.com)
oidc-proxy
https://doku.tid.dfn.de/de:shinidp:oidc-proxy?rev=1751532301&do=diff
<table><tr><th colspan="2" width="50%">2025/01/16 13:45</th><th colspan="2" width="50%">aktuell</th></tr><tr><td class="diff-blockheader" colspan="2">Zeile 1:</td>
<td class="diff-blockheader" colspan="2">Zeile 1:</td>
</tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">===== OpenID Connect Proxy mit angeschlossenen Diensten ===== </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline">[[de:shibidp:oidc-proxy|<strong class="diff-mark">hier geht's lang</strong>]]</td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">(zurück zur </strong>[[de:shibidp:<strong class="diff-mark">config-attributes#haeufig_genutzte_service_provider|Übersicht]]) </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">Der OpenID-Connect-Proxy dient der Anbindung von Diensten an die DFN-AAI, die nicht SAML-fähig sind, dafür aber OpenID Connect unterstützen. </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">Bei den unten angegebenen Attributen handelt es sich um das Superset, das für die angebundenen Dienste maximal zur Verfügung steht. Der Proxy leitet jedoch nur die Attribute bzw. Claims weiter, die der betreffende Dienst tatsächlich benötigt, mindestens ''sub''. </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"><file xml ./conf/attribute-filter.xml> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"><AttributeFilterPolicy id="dfn_aai_oidc_proxy"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">   <PolicyRequirementRule xsi:type="Requester" value="https://</strong>oidc-proxy<strong class="diff-mark">.aai.dfn.de" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="samlPairwiseID"        permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="sn"                    permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="givenName"             permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="displayName"           permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="mail"                  permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="schacHomeOrganization" permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="o"                     permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="eduPersonAffiliation"  permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">      <AttributeRule attributeID="eduPersonAssurance"    permitAny="true" /> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"></AttributeFilterPolicy> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"></file> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">\\ </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">==== Liste der angeschlossenen Dienste ==== </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"><datatables paging="false" info="false">    </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">^ Bezeichnung  ^ Beschreibung ^ Dienstanbieter / Firma                                      ^ Kontakt (E-Mail) ^ Link zu Datenschutzinformationen                        ^ Benötigte claims ^ </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline">| <strong class="diff-mark">[[https://rocket-meals.de/homepage/|Rocket Meals</strong>]] <strong class="diff-mark">| Campus App - Studierende können digitale Leistungen der Studierendenwerke nutzen | [[https://baumgartner-software.de|Baumgartner Software UG]] | info@baumgartner-software.de | https://rocket-meals.de/homepage/datenschutzerklaerung/ | sub              | </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"></datatables> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark">\\ </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
<tr><td class="diff-lineheader">-</td><td class="diff-deletedline"><strong class="diff-mark"> </strong></td><td class="diff-lineheader">+</td><td class="diff-addedline"></td></tr>
</table>