ページ履歴

--------attribute-resolver.xmlに追加--------------
<AttributeDefinition xsi:type="ad:Simple" id="eduPersonEntitlementForEduroamFedID" sourceAttributeID="eduPersonEntitlement">
    <Dependency ref="mappedAffiliation" />
    <AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:eduPersonEntitlement" encodeType="false" />
    <AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" friendlyName="eduPersonEntitlement" encodeType="false" />
<AttributeDefinition></AttributeDefinition>
<AttributeDefinition id="mappedAffiliation" xsi:type="Mapped" xmlns ="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="uid">
    <Dependency ref="myLDAP" />
 <!-- if the name is not in the expected format, just return it as-is -->
    <DefaultValue></DefaultValue>
 <ValueMap>
      <ReturnValue>urn:mace:gakunin.jp:entitlement:federated-id.eduroam.jp:site-admin</ReturnValue>
      <SourceValue>ID1</SourceValue>
      <SourceValue>ID2</SourceValue>
      <SourceValue>ID3</SourceValue>
  </ValueMap>
</AttributeDefinition>
 

--------attribute-filter.xmlに追加--------------
<!-- Policy for Eduroam FederatedID -->
<AttributeFilterPolicy id="PolicyforEduroamFederatedId">
<PolicyRequirementRule xsi:type="Requester" value="https://federated-id.eduroam.jp/shibboleth-sp" />
    <AttributeRule attributeID="eduPersonTargetedID">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
    <AttributeRule attributeID="organizationName">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
    <AttributeRule attributeID="eduPersonAffiliation">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
    <AttributeRule attributeID="eduPersonEntitlementForEduroamFedID">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>
</AttributeFilterPolicy>