Re: [Unity-idm-discuss] SAML SP using AttributeConsumingServiceIndex

[Roman K. <ro...@un...>]

Dear Sander,

We've analyzed the issue of AttributeConsumingServiceIndex in the context
of SAML and the specification.

Our initial thoughts are that ignoring this parameter by default might be
incorrect, as there are conditions under which it should not be omitted.

We are leaning towards introducing a configuration option that would allow
administrators to decide how to handle this index. Implementing full
AttributeConsumingService selection is a much larger scope of work, which
is not currently on our roadmap.

I would like to ask how urgent this matter is for you? Would a solution
delivered as part of a regular update be acceptable to you?

Best regards,
Roman

śr., 27 sie 2025 o 11:57 Sander Apweiler <sa....@fz...>
napisał(a):

> Dear Krzysztof,
> dear Roman,
>
> one of our colleagues wants to connect Open edX via SAML. Open edX send
> the AttributeConsumingServiceIndex in the AuthN request, which is not
> supported by unity. At the moment it returns this to as message to the
> SP. Since the AtributeConsumingServiceIndex may be just ignored by the
> IdPs, is there any possibility to make unity ignoring this instead of
> returning the error message? I can understand that there are reasons to
> return the error message instead of just ignoring it. If not would it
> be an option to make this configurable by administrators?
>
> Best regards,
> Sander
>
> --
> Large-Scale Data Science
> Juelich Supercomputing Centre
>
> phone: +49 2461 61 8847
> fax: +49 2461 61 6656
> email: sa....@fz...
>
> -----------------------------------------------------------------------
> -----------------------------------------------------------------------
> Forschungszentrum Jülich GmbH
> 52425 Jülich
> Sitz der Gesellschaft: Jülich
> Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
> Vorsitzender des Aufsichtsrats: MinDir Stefan Müller
> Geschäftsführung: Prof. Dr. Astrid Lambrecht (Vorsitzende),
> Dr. Stephanie Bauer (stellvertretende Vorsitzende),
> Prof. Dr. Ir. Pieter Jansens, Prof. Dr. Laurens Kuipers
> -----------------------------------------------------------------------
> -----------------------------------------------------------------------
>
>
>
> _______________________________________________
> Unity-idm-discuss mailing list
> Uni...@li...
> https://lists.sourceforge.net/lists/listinfo/unity-idm-discuss
>