Service Description Schema

1. browse for the xml file (example SP1.xml)

• ShARPE installation

Service Provider Description Editor (SPDE)

Integration of SPD schema to SAML 2.0 format

Installation of SPDE

• • scope: some applications require the attributes to be scoped, hence providing a scope would make the all values specified in this attribute to carry the scope.

• [[Federation.ShARPEInstall][ShARPE installation]

1. browse for the xml file (example SP1.xml

Loading existing XML

1. browse for the xml file
2. edit as necessary
3. click Generate XML when done, save the resultant XML file

How to create new SP Description XML

Installation of SP Description Editor

1. Download SPDescription.war from federation http://federation.org.au/software/SPDescription.war
2. deploy it to your tomcat's webapps folder
3. open browser and points to http://MY_DNS:8080/SPDescription
4. it should show the main page of SP Description Editor

How to use SP Description Editor

1. Load SP Description Editor
2. create New SP Description
3. enter details of
   • SP Identifier: the identifier of this SP as known by IdP or federation, in the form of URI
   • SP Name: any friendly name of this SP
   • SP Location: URL location of this SP
   • SP Description: some description for IdP members to know the SP better
4. create Services (or Products) details as necessary for this SP
5. again, enter details of the Service
6. each Service may have different Service Level for its users. Create them.
7. in order for the user to gain access to the ServiceLevel^? of a particular Service, user needs to know the required attribute of such ServiceLevel^?. Identify the required attributes for the service level, indicate whether it is an optional or need to be supplied attribute, and if necessary the list of acceptable values for such attribute.
   • Name: the name of the attribute, e.g. "urn:mace:dir:attribute-def:eduPersonAffiliation" or "urn:au:testfed:level-1:e-snail-mail"
   • FriendlyName^?: alternative easy-to-remember name for this attribute, e.g. "affiliation" or "e-mail"
   • isRequired: does the IdP member really need to supply this attribute?
   • Value: list of acceptable values separated by comma, e.g. "staff, member" or "username@federation.org.au"
8. When finished, click on "Generate XML", which will give a complete XML description of the SP you've inputted.
9. Save it into an XML file (with any name). This file is ready to be used by Sharpe or to be loaded into federation registries

Service Provider Description (SP Description)

Components of SP Description

• SP identifier, name, description, and location
• Services available specified in its name, description and location
• ServiceLevels^? available in each Service and the list of attributes required in order to gain access to the levels

Sample of SP Description

<?xml version="1.0" encoding="UTF-8"?>
<ServiceProvider xmlns:ps="urn:mace:shibboleth:services:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:services:1.0 ServiceDescriptor.xsd">

  <ServiceProviderIdentifier>urn:au:testfed:level-1:demo.federation.org.au</ServiceProviderIdentifier>
  <ServiceProviderName xml:lang="en">Demo Federation Test Site</ServiceProviderName>
  <ServiceProviderLocation xml:lang="en">https://demo.federation.org.au</ServiceProviderLocation>
  <ServiceProviderDescription xml:lang="en">Test site for federation applications</ServiceProviderDescription>
  <Service identifier="demo">
    <ServiceName xml:lang="en">Demo</ServiceName>
     <ServiceDescription xml:lang="en">To check if IdP is fully registered</ServiceDescription>
     <ServiceLocation xml:lang="en">https://demo.federation.org.au/shibboleth/target</ServiceLocation>
     <ServiceLevel identifier="none">
        <ServiceLevelName xml:lang="en">testing idp</ServiceLevelName>
        <ServiceLevelDescription xml:lang="en">to test idp registration</ServiceLevelDescription>
     </ServiceLevel>
   </Service>
   <Service identifier="sharpejspdemo">
     <ServiceName xml:lang="en">Sharpe JSP test</ServiceName>
     <ServiceDescription xml:lang="en">Test to see the release attributes</ServiceDescription>
     <ServiceLocation xml:lang="en">https://demo.federation.org.au/SharpeJSPDemo/demo.jsp</ServiceLocation>
     <ServiceLevel identifier="gold">
       <ServiceLevelName xml:lang="en">Gold Access</ServiceLevelName>
       <ServiceLevelDescription xml:lang="en">need 3 attributes</ServiceLevelDescription>
       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonAffiliation"
                              FriendlyName="your affiliation" isRequired="true"/>
       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonNickname"
                              FriendlyName="your nickname" isRequired="true"/>
       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:sn"
                              FriendlyName="surname" isRequired="true"/>
     </ServiceLevel>
     <ServiceLevel identifier="silver">
       <ServiceLevelName xml:lang="en">Silver Access</ServiceLevelName>
       <ServiceLevelDescription xml:lang="en">need 2 attributes</ServiceLevelDescription>
       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonAffiliation"
                              FriendlyName="your affiliation" isRequired="true"/>
       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonNickname"
                              FriendlyName="your nickname" isRequired="true"/>
     </ServiceLevel>
      <ServiceLevel identifier="bronze">
          <ServiceLevelName xml:lang="en">Bronze Access</ServiceLevelName>
           <ServiceLevelDescription xml:lang="en">need 1 attribute</ServiceLevelDescription>
           <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonAffiliation"
                                 FriendlyName="your affiliation" isRequired="true"/>
      </ServiceLevel>
    </Service>
  </ServiceProvider>

Resources

• WebSharpe
• Autograph

-- BrucLiong - 16 Feb 2006