diff options
| author | Thomas Lenz <thomas.lenz@egiz.gv.at> | 2021-01-19 10:37:45 +0100 |
|---|---|---|
| committer | Thomas Lenz <thomas.lenz@egiz.gv.at> | 2021-01-19 11:42:21 +0100 |
| commit | 58b3c1c2d7a27775af8c0b7c9d12dea08aa575fa (patch) | |
| tree | 803baa58694bf22ce52dfc8787571efc4f59b664 /connector | |
| parent | c77fcb3e75da79647f099216c3478ecdf219a120 (diff) | |
| download | National_eIDAS_Gateway-58b3c1c2d7a27775af8c0b7c9d12dea08aa575fa.tar.gz National_eIDAS_Gateway-58b3c1c2d7a27775af8c0b7c9d12dea08aa575fa.tar.bz2 National_eIDAS_Gateway-58b3c1c2d7a27775af8c0b7c9d12dea08aa575fa.zip | |
build 'requesterId' for private-sector SP's based on hashed unique AppIds
set 'requesterId' and 'providerName' to static value for any type of SP
Diffstat (limited to 'connector')
| -rw-r--r-- | connector/src/main/resources/application.properties | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/connector/src/main/resources/application.properties b/connector/src/main/resources/application.properties index b13b6c18..b92102ed 100644 --- a/connector/src/main/resources/application.properties +++ b/connector/src/main/resources/application.properties @@ -51,10 +51,23 @@ eidas.ms.auth.eIDAS.node_v2.entityId=ownSpecificConnector #eidas.ms.auth.eIDAS.node_v2.forward.endpoint= eidas.ms.auth.eIDAS.node_v2.forward.method=POST eidas.ms.auth.eIDAS.node_v2.countrycode=AT +#eidas.ms.auth.eIDAS.node_v2.publicSectorTargets=urn:publicid:gv.at:cdid\+.* eidas.ms.auth.eIDAS.node_v2.publicSectorTargets=.* -eidas.ms.auth.eIDAS.node_v2.workarounds.addAlwaysProviderName=true + +## use SAML2 requestId as transactionIdentifier to mitigate problems with SAML2 relaystate eidas.ms.auth.eIDAS.node_v2.workarounds.useRequestIdAsTransactionIdentifier=true -eidas.ms.auth.eIDAS.node_v2.workarounds.useStaticProviderNameForPublicSPs=true + +## use hashed version of unique SP-Identifier as requesterId +eidas.ms.auth.eIDAS.node_v2.requesterId.useHashedForm=true + +## user static requesterId for all SP's in case of LU +eidas.ms.auth.eIDAS.node_v2.requesterId.lu.useStaticRequesterForAll=true + + +## set provider name for all public SPs +eidas.ms.auth.eIDAS.node_v2.workarounds.addAlwaysProviderName=false + + eidas.ms.auth.eIDAS.node_v2.loa.requested.minimum=http://eidas.europa.eu/LoA/high @@ -92,6 +105,10 @@ eidas.ms.auth.eIDAS.szrclient.params.setBirthNameIfAvailable=true eidas.ms.auth.eIDAS.szrclient.debug.logfullmessages=false eidas.ms.auth.eIDAS.szrclient.debug.useDummySolution=false + + + + ##without mandates eidas.ms.auth.eIDAS.node_v2.attributes.requested.onlynatural.0=PersonIdentifier,true eidas.ms.auth.eIDAS.node_v2.attributes.requested.onlynatural.1=FamilyName,true |