catalyst / moodle-auth_saml2

SAML done 100% in Moodle, fast, simple, secure
https://moodle.org/plugins/auth_saml2
71 stars 133 forks source link

"RequestedAttribute" in the metadata file. #688

Closed FxBoul closed 2 years ago

FxBoul commented 2 years ago

Hello, there is no "RequestedAttribute" in the metadata file. Is there a way to configure this ? I can't figure it. Thank you for your help. Brgds/Fx

brendanheywood commented 2 years ago

Notes to self:

http://docs.oasis-open.org/security/saml-protoc-req-attr-req/v1.0/saml-protoc-req-attr-req-v1.0.html

This looks to be supported by SSP so will be a code wiring job

brendanheywood commented 2 years ago

So just confirming the code we are working on now: 1) we will add an admin setting exposing attributes that should be requested 2) this will be exposed in the Moodle SP xml metadata

I just need to confirm that these are only needed in the SP metadata or are they also need in the authentication request?

FxBoul commented 2 years ago

Hello, Sounds good, What are the authentication requests ?

From: Brendan Heywood @.> Sent: Monday, August 8, 2022 6:56 AM To: catalyst/moodle-auth_saml2 @.> Cc: François Xavier BOULANGER @.>; Author @.> Subject: Re: [catalyst/moodle-auth_saml2] "RequestedAttribute" in the metadata file. (Issue #688)

So just confirming the code we are working on now:

  1. we will add an admin setting exposing attributes that should be requested
  2. this will be exposed in the Moodle SP xml metadata

I just need to confirm that these are only needed in the SP metadata or are they also need in the authentication request?

— Reply to this email directly, view it on GitHubhttps://github.com/catalyst/moodle-auth_saml2/issues/688#issuecomment-1207664921, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AZBDFEPJBH7T3L2SDN6RTWTVYCHPTANCNFSM5VVQSDQQ. You are receiving this because you authored the thread.Message ID: @.**@.>>