{"type":"doc","content":[{"type":"bodiedExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"excerpt","parameters":{"macroParams":{"atlassian-macro-output-type":{"value":"BLOCK"}},"macroMetadata":{"macroId":{"value":"4a9926ea-6e1f-458c-9d2b-3a6472707ae2"},"schemaVersion":{"value":"1"},"title":"抜粋"}}},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"SPに対してどのような属性が送出されるか確認する方法","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

個別のページに移動

true

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"paragraph","content":[{"text":"個別のページに移動","type":"text","marks":[{"type":"link","attrs":{"href":"https://nii-auth.atlassian.net/wiki/spaces/GakuNinShare/pages/44140058"}}]}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"excerpt-include","parameters":{"macroParams":{"":{"value":"SPに対してどのような属性が送出されるか確認する方法"},"nopanel":{"value":"true"}},"macroMetadata":{"macroId":{"value":"0e2bbef8-48cf-4c89-822a-2f57c680fa06"},"schemaVersion":{"value":"1"},"title":"抜粋を挿入"}}}}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"NameID設定","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

個別のページに移動

true

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"paragraph","content":[{"text":"個別のページに移動","type":"text","marks":[{"type":"link","attrs":{"href":"https://nii-auth.atlassian.net/wiki/spaces/GakuNinShare/pages/44140116"}}]}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"excerpt-include","parameters":{"macroParams":{"":{"value":"NameID設定"},"nopanel":{"value":"true"}},"macroMetadata":{"macroId":{"value":"cb042df9-7f0b-4fc8-86ad-21aa9256685f"},"schemaVersion":{"value":"1"},"title":"抜粋を挿入"}}}}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"eduPersonTargetedID属性の送信","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

NameIDとは別に//saml2:AttributeStatement/saml2:Attribute[@FriendlyName="eduPersonTargetedID"]としてeduPersonTargetedID属性を送信する設定は下記の通りです。

computedId

computedIdでの設定を下記に示します。をあらかじめ実行しておくことが前提で、定義されたconf/saml-nameid.propertiesのプロパティを参照しています。

conf/attribute-resolver.xml
xmlconf/attribute-resolver.xml\n\n\n\n\n\n\n\n \n \n \n\n\n\n\n\n\n\n\n\n \n]]>
conf/attribute-filter.xmlの例
xmlconf/attribute-filter.xml\n\n \n \n \n \n]]>

storedId

storedIdでの設定を下記に示します。をあらかじめ実行しておくことが前提で、定義されたconf/global.xmlのbean MyDataSourceとconf/saml-nameid.propertiesのプロパティを参照します。

conf/attribute-resolver.xml
xmlconf/attribute-resolver.xml\n\n\n\n\n\n\n\n \n \n \n\n \n \n\n\n\n\n\n\n \n MyDataSource\n]]>
conf/attribute-filter.xmlの例
xmlconf/attribute-filter.xml\n\n \n \n \n \n]]>

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"paragraph","content":[{"text":"NameID","type":"text","marks":[{"type":"code"}]},{"text":"とは別に","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"//saml2:AttributeStatement/saml2:Attribute","type":"text","marks":[{"type":"code"}]},{"text":"[@FriendlyName=\"eduPersonTargetedID\"]","type":"text","marks":[{"type":"code"}]},{"text":"として","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"eduPersonTargetedID","type":"text","marks":[{"type":"code"}]},{"text":"属性を送信する設定は下記の通りです。","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"computedId","type":"text"}]},{"type":"paragraph","content":[{"text":"computedIdでの設定を下記に示します。","type":"text"},{"text":"persistent-idの設定","type":"text","marks":[{"type":"link","attrs":{"href":"https://nii-auth.atlassian.net/wiki/spaces/GakuNinShare/pages/44140116/NameID#NameID設定-computedId"}},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"をあらかじめ実行しておくことが前提で、定義された","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"conf/saml-nameid.propertiesの","type":"text","marks":[{"type":"code"}]},{"text":"プロパティを参照しています。","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/attribute-resolver.xml","type":"text","marks":[{"type":"code"}]}]},{"type":"expand","attrs":{"title":""},"content":[{"type":"heading","attrs":{"level":5},"content":[{"text":"conf/attribute-resolver.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\n\n\n\n\n\n\n \n \n \n\n\n\n\n\n\n\n\n\n \n","type":"text"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/attribute-filter.xml","type":"text","marks":[{"type":"code"}]},{"text":"の例","type":"text"}]},{"type":"expand","attrs":{"title":""},"content":[{"type":"heading","attrs":{"level":5},"content":[{"text":"conf/attribute-filter.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\n \n \n \n \n","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"storedId","type":"text"}]},{"type":"paragraph","content":[{"text":"storedId","type":"text"},{"text":"での設定を下記に示します。","type":"text"},{"text":"persistent-idの設定","type":"text","marks":[{"type":"link","attrs":{"href":"https://nii-auth.atlassian.net/wiki/spaces/GakuNinShare/pages/44140116/NameID#NameID設定-storedId"}},{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"をあらかじめ実行しておくことが前提で、定義された","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"conf/global.xml","type":"text","marks":[{"type":"code"}]},{"text":"のbean ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"MyDataSource","type":"text","marks":[{"type":"code"}]},{"text":"と","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]},{"text":"conf/saml-nameid.propertiesのプ","type":"text","marks":[{"type":"code"}]},{"text":"ロパティを参照します。","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/attribute-resolver.xml","type":"text","marks":[{"type":"code"}]}]},{"type":"expand","attrs":{"title":""},"content":[{"type":"heading","attrs":{"level":5},"content":[{"text":"conf/attribute-resolver.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\n\n\n\n\n\n\n \n \n \n\n \n \n\n\n\n\n\n\n \n MyDataSource\n","type":"text"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/attribute-filter.xml","type":"text","marks":[{"type":"code"}]},{"text":"の例","type":"text"}]},{"type":"expand","attrs":{"title":""},"content":[{"type":"heading","attrs":{"level":5},"content":[{"text":"conf/attribute-filter.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\n \n \n \n \n","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"同じ値が再割り当てされないeduPersonTargetedIDの生成方法","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

個別のページに移動

true

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"paragraph","content":[{"text":"個別のページに移動","type":"text","marks":[{"type":"link","attrs":{"href":"https://nii-auth.atlassian.net/wiki/spaces/GakuNinShare/pages/44140054"}}]}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.macro.core","extensionKey":"excerpt-include","parameters":{"macroParams":{"":{"value":"同じ値が再割り当てされないeduPersonTargetedIDの生成方法"},"nopanel":{"value":"true"}},"macroMetadata":{"macroId":{"value":"9b694d10-42f1-42b9-baec-8e0b7fd49331"},"schemaVersion":{"value":"1"},"title":"抜粋を挿入"}}}}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"SAML 2 persistent IDでのAttribute Queryの許可","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

この機能はcomputedIdを使っている場合は使用できません。まずstoredIdを使うように設定変更してください。

conf/c14n/subject-c14n.xml
conf/c14n/subject-c14n.xmlの<ref bean="c14n/SAML2Persistent" />をアンコメントします。
xmlconf/c14n/subject-c14n.xml\n]]>diff差分\n- \n+ ]]>

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"この機能はcomputedIdを使っている場合は使用できません。まずstoredIdを使うように設定変更してください。","type":"text"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/c14n/subject-c14n.xml","type":"text"},{"type":"hardBreak"},{"text":"conf/c14n/subject-c14n.xml","type":"text","marks":[{"type":"code"}]},{"text":"の","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":"をアンコメントします。","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]},{"type":"paragraph","content":[{"text":"conf/c14n/subject-c14n.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n","type":"text"}]},{"type":"paragraph","content":[{"text":"差分","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"diff"},"content":[{"text":" \n- \n+ ","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"SAML1でフロントチャネルにAttributeStatementを含める設定","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

以下は全てのSPに対して適用する方法です。特定のSPに対してのみ適用する場合は、そのSP用のbeanをRelyingPartyOverridesに作成し、プロファイルに以下の設定を行ってください。

conf/relying-party.xmlbean[@parent="Shibboleth.SSO"]にp:includeAttributeStatement="true"を追加します。
xmlconf/relying-party.xml\n \n \n \n \n \n \n \n \n \n \n \n \n \n]]>diff差分\n \n \n- \n+ \n \n \n \n \n \n \n \n \n \n \n ]]>

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"以下は全てのSPに対して適用する方法です。特定のSPに対してのみ適用する場合は、そのSP用のbeanをRelyingPartyOverridesに作成し、プロファイルに以下の設定を行ってください。","type":"text"}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/relying-party.xml","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"bean[@parent=\"Shibboleth.SSO\"]","type":"text","marks":[{"type":"code"}]},{"text":"に","type":"text"},{"text":"p:includeAttributeStatement=\"true\"","type":"text","marks":[{"type":"code"}]},{"text":"を追加します。","type":"text"}]},{"type":"paragraph","content":[{"text":"conf/relying-party.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n \n \n \n \n \n \n \n \n \n \n \n \n \n","type":"text"}]},{"type":"paragraph","content":[{"text":"差分","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"diff"},"content":[{"text":" \n \n \n- \n+ \n \n \n \n \n \n \n \n \n \n \n ","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"特定のSPへのアサーションを暗号化しない設定","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

conf/relying-party.xml以下のようにshibboleth.RelyingPartyOverridesの子要素として当該SP向けの設定を追加してください。
・SPのentityIDは適切なものに置き換えてください。
・変化を最小限にするため基本的には設定は同ファイルのshibboleth.DefaultRelyingPartyの設定と同じくし、SAML2.SSOにp:encryptAssertions="false"を追加してください。DefaultRelyingPartyにある他のbeanも必要ならコピー&ペーストしてください。
・他にもRelyingPartyOverridesの子要素があり当該SPが他のoverrideにすでに記述されている場合、マージは行われませんので同等の設定になるように1つにまとめるようにしてください。
xmlconf/relying-party.xml\n\n \n \n ...\n\n \n \n \n https://sp.example.ac.jp/shibboleth-sp\n \n \n \n \n \n \n \n \n \n \n ]]>diff差分\n \n \n \n ...\n \n+ \n+ \n+ \n+ https://sp.example.ac.jp/shibboleth-sp\n+ \n+ \n+ \n+ \n+ \n+ \n+ \n+ \n+ \n+ \n ]]>

","nestedContent":{"type":"doc","content":[{"type":"expand","attrs":{"title":""},"content":[{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"conf/relying-party.xml","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"以下のように","type":"text"},{"text":"shibboleth.RelyingPartyOverrides","type":"text","marks":[{"type":"code"}]},{"text":"の子要素として当該SP向けの設定を追加してください。","type":"text"},{"type":"hardBreak"},{"text":"・SPのentityIDは適切なものに置き換えてください。","type":"text"},{"type":"hardBreak"},{"text":"・変化を最小限にするため基本的には設定は同ファイルの","type":"text"},{"text":"shibboleth.DefaultRelyingParty","type":"text","marks":[{"type":"code"}]},{"text":"の設定と同じくし、","type":"text"},{"text":"SAML2.SSO","type":"text","marks":[{"type":"code"}]},{"text":"に","type":"text"},{"text":"p:encryptAssertions=\"false\"","type":"text","marks":[{"type":"code"}]},{"text":"を追加してください。DefaultRelyingPartyにある他のbeanも必要ならコピー&ペーストしてください。","type":"text"},{"type":"hardBreak"},{"text":"・他にもRelyingPartyOverridesの子要素があり当該SPが他のoverrideにすでに記述されている場合、マージは行われませんので同等の設定になるように1つにまとめるようにしてください。","type":"text"}]},{"type":"paragraph","content":[{"text":"conf/relying-party.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":" \n\n \n \n ...\n\n \n \n \n https://sp.example.ac.jp/shibboleth-sp\n \n \n \n \n \n \n \n \n \n \n ","type":"text"}]},{"type":"paragraph","content":[{"text":"差分","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"diff"},"content":[{"text":" \n \n \n \n ...\n \n+ \n+ \n+ \n+ https://sp.example.ac.jp/shibboleth-sp\n+ \n+ \n+ \n+ \n+ \n+ \n+ \n+ \n+ \n+ \n ","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}],"version":1}}}},{"type":"heading","attrs":{"level":3},"content":[{"text":"LDAPにエントリがない場合にIdP上でエラーにする方法","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"legacy-content","text":"","parameters":{"reason":"リッチテキスト本文に含まれる expand マクロは、新しいエディターで作成または編集できません。","cxhtml":"

個別のページに移動

true

属性・NameID

SPに対してどのような属性が送出されるか確認する方法

NameID設定

eduPersonTargetedID属性の送信

同じ値が再割り当てされないeduPersonTargetedIDの生成方法

SAML 2 persistent IDでのAttribute Queryの許可

SAML1でフロントチャネルにAttributeStatementを含める設定

特定のSPへのアサーションを暗号化しない設定

LDAPにエントリがない場合にIdP上でエラーにする方法