I2 RP Profile Claim Processing Tests
From OSIS Open Source Identity Systems
Contents |
Claim Processing Examples And Tests
If you have a component that an RP can use to test a given issue, put your data here.
* I2-Barcelona * I2 Relying Party Profiles * I2 RP Profile Claim Processing * I2 RP Profile Token Validation
Expected Multi-valued Claim Test
Test #1: Given name as expected Multi-valued Claim
Instructions:
* Create an account at one of the supporting IdPs below and add more than one First Name. * Use the card at one of the supporting RPs below
Success:
* First Name when viewed at the RP should contain a concatenation of all given first names.
Failure:
* Only one first name is shown.
Supporting IDPs
To be a supporting IdP for Test #1 you must be able to set multiple first names. If you can't set multiple first names but you prefer a different attibute be multi-valued, please suggest a new Test case. [Bandit WAG IdP] -- note that if you don't have time to create your own account, you can login as user multi.valued.test (pwd: test-multi) and use that card.
Supporting RPs
* [PamelaProject Joomla RP] (this doesn't quite actually work yet but it will) * [CA SiteMinder RP] (RP expects a (optional) presented webpage claim to be multi-valued)
Unexpected Multi-valued Claim Test
Test #1: Email as unexpected Multi-valued Claim
Instructions:
* Create an account at one of the supporting IdPs below and add more than one Email Address. * Use the card at one of the supporting RPs below
Success:
* An error should be shown to the user.
Failure:
* The first email is accepted as the only returned value and processing continues.
Supporting IDPs
[Bandit WAG IdP] -- note that if you don't have time to create your own account, you can login as user multi.valued.email (pwd: test-multi) and use that card, it is already set up.
Supporting RPs
* [PamelaProject Joomla RP] (this doesn't quite actually work yet but it will) * [CA SiteMinder RP] (RP expects a (optional) presented gender claim to be single-valued)
HTML Entity Test
Instructions:
* Import [this card] into an Identity Selector (password is osisinterop) * Use this card at your relying party
Success:
* nothing happens
Failure:
* A javascript alert pops up saying "hacked!"
Supporting RPs
* [CA SiteMinder RP] (all claim values escaped)
Credit: Thanks to Robin Martherus for contributing this idea during the last interop
