Re: [Unity-idm-discuss] Using multiple SAML federations with IdP overlap

[Sander A. <sa....@fz...>]

Hi Krzysztof,

yes we want to set different level of assurance (within translation
profile), based on this attribute. This attribute indicates how the
identity vetting was done at the organisations.

Cheers,
Sander

On Sat, 2019-11-30 at 19:24 +0100, Krzysztof Benedyczak wrote:
> Hi Sander,
> 
> W dniu 29.11.2019 o 10:57, Sander Apweiler pisze:
> > Hi Krzysztof,
> > I had a deeper look into the metadata file of the basic federation.
> > There is an attribute which indicates if an IdP is only basic or
> > advanced:
> > 
> > <saml:Attribute Name="http://aai.dfn.de/loa/degree-of-reliance"
> > NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
> > <saml:AttributeValue>advanced</saml:AttributeValue>
> > 
> > Do you know a way to use this information later in unity?
> 
> If this is metadata's attribute then Unity offers no feature
> allowing 
> you to process it. So either way we would need an additional feature
> to 
> support your case. Do you want to use this attribute to filter IdPs
> from 
> some metadata documents?
> 
> Cheers
> Krzysztof
> 
> 
-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
-----------------------------------------------------------------------
-----------------------------------------------------------------------