Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The authentication source ids provided by the APIs can be referred with the following prefixes:

  • urn:mpass.id:authnsource: for authentication sources (for instance urn:mpass.id:authnsource:ShibLdap)

The request (GET) parameters

...

> GET /idp/profile/api/authnsources HTTP/1.1
> Host: mpass mpass-proxy.csc.fi
>
< HTTP/1.1 200 OK
< Date: Wed, 07 Feb 2018 12:53:51 GMT
< Server: Jetty(9.4.0.v20161208)
< Cache-Control: no-cache, no-store
< Pragma: no-cache
< Content-Type: application/json; charset=UTF-8
< Set-Cookie: JSESSIONID=node0orwc2vbh6eb7yt76o4e7q2pt37480.node0;Path=/idp;Secure
< Transfer-Encoding: chunked
<
{
    "lang":"FI",
    "response": [
        {
            "tags":["PrimarySchools"],
            "iconUrl":"https://example.org/icon1.jpg",
            "directRegistryConnection":true,
            "supportsForced":true,
            "supportsPassive":true,
            "id":"MunOne",
            "title":"Ankkalinna"
        },
        ...
    ]
}

...

Remember to use the prefix from earlier!

  • urn:mpass.id:authnsource:ShibLdap

<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                    AssertionConsumerServiceURL="https://mpass-proxy-test.csc.fi/attributetest/Shibboleth.sso/SAML2/POST"
                    Destination="https://mpass-proxy-test.csc.fi/idp/profile/SAML2/Redirect/SSO"
                    ID="_d38e6f593bda8afa743782a3ecf40edf"
                    IssueInstant="2018-02-07T13:24:20Z"
                    ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                    Version="2.0"
                    >
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://mpass-proxy-test.csc.fi/attributetest/shibboleth</saml:Issuer>Issuer>
    <samlp:NameIDPolicy AllowCreate="1" />
    <samlp:RequestedAuthnContext>
        <saml:AuthnContextClassRef xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:mpass.id:authnsource:ShibLdap</saml:AuthnContextClassRef>
    </samlp:RequestedAuthnContext>
</samlp:AuthnRequest>

...