Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Configure attribute resolution using internal JSON attribute resolution

Note

Internal JSON resolution is only available in the moonshot-gss-eap-noshib package. This package is the same as the classic moonshot-gss-eap package, but is built without Shibboleth support.

This package will still install some Shibboleth Consortium packages (notably OpenSAML), but not the Shibboleth daemon.

Moonshot now also supports the use of a JSON file that performs basic mapping of attributes in the Moonshot response to local attributes as needed. The most basic functionality will simply copy the value from an attribute provided, but the built-in function also allows the setting of some values statically. 

Note

Internal JSON resolution is only available in the moonshot-gss-eap-noshib package. This package will still install some Shibboleth Consortium packages (notably OpenSAML), but not the Shibboleth daemon.

The difference between the internal JSON attribute resolution and the Shibboleth-based resolution is that the internal JSON resolver does not use any namespace by default at all and will require the URN (the identifier) for the attribute to be specified in the urn:ietf:gss:* namespace, while the Shibboleth-based resolution defaults to the SAML namespaces and requires that only RADIUS-based attributes be specified with the urn:ietf:gss:* namespace.

...