...
Query String | Command Line | Description |
---|---|---|
requester | --requester, -r | Required, identifies the relying party (SP) to simulate a resolution for |
principal | --principal, -n | Required, names the subject/user to simulate a resolution for |
acsIndex | --acsIndex, -i | Identifies the index of anĀ <md:AttributeConsumingService> element in the SP's metadata, which allows certain uncommonly used filtering rules to be run |
saml1 | --saml1 | Value is ignored, if present causes the output to be encoded into a SAML 1.1 assertion |
saml2 | --saml2 | Value is ignored, if present causes the output to be encoded into a SAML 2.0 assertion |
...
V4.1 includes properties to control various aspects of the flow's behavior using an internally-defined bean that may be overridden if required.
Localtabgroup | |||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
The general properties configuring this flow via admin/admin.properties are:
| id | FDXML
-live | ||
---|---|---|
|
To replace the internally defined flow descriptor bean, the following XML is required:
Code Block | ||
---|---|---|
| ||
<util:list id="shibboleth.AvailableAdminFlows">
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/resolvertest"
p:loggingId="%{idp.resolvertest.logging:ResolverTest}"
p:policyName="%{idp.resolvertest.accessPolicy:AccessByIPAddress}"
p:nonBrowserSupported="%{idp.resolvertest.nonBrowserSupported:false}"
p:authenticated="%{idp.resolvertest.authenticated:false}"
p:resolveAttributes="%{idp.resolvertest.resolveAttributes:false}" />
</util:list> |
In older versions and upgraded systems, this list is defined in conf/admin/general-admin.xml. In V4.1+, no default version of the list is provided and it may simply be placed in conf/global.xml if needed.