Versions Compared

Old Version 4

changes.mady.by.user Scott Cantor

Saved on

compared with

New Version 5

changes.mady.by.user Scott Cantor

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Localtabgroup


Localtab
activetrue
titleProperties (V4.1+)

The general properties configuring this flow via admin/admin.properties are:

NameDefaultDescription
idp.resolvertest.loggingResolverTestAudit log identifier for flow
idp.resolvertest.accessPolicyAccessByIPAddressName of access control policy for request authorization
idp.resolvertest.authenticatedfalseWhether authentication should be performed prior to access control evaluation
idp.resolvertest.nonBrowserSupportedfalseWhether the flow should allow for non-browser clients during authentication
idp.resolvertest.resolveAttributesfalseWhether attributes should be resolved prior to access control evaluation



Localtab
idFDXML
titleFlow Descriptor XML (V4.1+)

To replace the internally defined flow descriptor bean, the following XML is required:

Code Block
languagexml
<util:list id="shibboleth.AvailableAdminFlows">
 
    <bean parent="shibboleth.AdminFlow"
        c:id="http://shibboleth.net/ns/profiles/resolvertest"
        p:loggingId="%{idp.resolvertest.logging:ResolverTest}"
        p:policyName="%{idp.resolvertest.accessPolicy:AccessByIPAddress}"
        p:nonBrowserSupported="%{idp.resolvertest.nonBrowserSupported:false}"
        p:authenticated="%{idp.resolvertest.authenticated:false}"
        p:resolveAttributes="%{idp.resolvertest.resolveAttributes:false}" />
 
</util:list>

In older versions and upgraded systems, this list is defined in conf/admin/general-admin.xml. In V4.1+, no default version of the list is provided and it may simply be placed in conf/global.xml if needed.