Description
Attribute Map and Filtering testing.
Setup
- You need an IPD and one SP for this test
How to test
Configuration
Mapping and filtering controls what attributes are included in the SAML assertion and what their name is. This is most easily seen in the MELLON environment variables.
If you haven't already, configure your SP to manage /cgi-bin and create printenv.pl like we do in the info plugin test <insert link here>
Restart Apache
# systemctl restart httpd
Configure mapping and filtering
Log into the idp as the admin user, https://idp.example.com/idp/
Select Administration -> Identity Providers -> saml2
Scroll to the bottom of the screen to see the configuration for default attribute mapping and default attributes.
By default every attribute is passed as-is and every attribute is allowed.
Change fullname to namefull
The first test is to simply rename an attribute. Under default attribute mapping click on the + to add a new rule and add:
fullname namefull
Then click Save at the bottom of the form.
Now go to https://sp.example.com/cgi-bin/printenv.pl and look for:
MELLON_namefull=Administrator
You'll notice that MELLON_fullname is included.
Filter out fullname =
Ok, so if we're mapping we probably don't want the old name included so let's drop it.
Right now filtering is a white-list defaulting to everything. Since we're dropping fullname we will need to specify everything we want to see.
Start by changing * to namefull
Then for each of these attributes click + to add it:
Expected Results
All the test steps should end with the specified results.