Name

schemat_selector — demonstration identity selector

Synopsis

schemat_selector [--retrieve-claim-types ] [--retrieve-requirements ] [--login ] [--list-compatible-cards ] [--create-card ] [--initialize-home ] [--initialize directory ] [--show-all-personas ] [--import-persona ] [--delete-persona ] [--show-all-cards ] [--delete-card ] [--show-all-rps ] [--delete-rp ] [--uri uri ] [--import-file uri filename] [--persona persona] [--send-same-card] [--debug trace|ssl|all ] [--user-agent str ] [--cert-accept any|filename] [--configuration-file filename] [--encrypted-token-input-file filename] [--encrypted-token-output-file filename] [--assertion-input-file filename] [--assertion-output-file filename] [--keystore filename] [--keystore-password password] [--private-key-alias alias] [--certificate-alias alias] [--card-alias alias] [--private-key-password password] [--schema-cache-directory pathname] [--schema-local-directory pathname]

Description

The schemat_selector is a demonstration identity selector for self-issued cards.

Modes

At most one of the following options must be specified. If none are specified, --login is assumed.

--retrieve-claim-types

The selector parses the HTML form of the relying party web site and displays a list of required and optional claim types.

--retrieve-requirements

The selector parses the HTML form of the relying party web site and displays the required token type and required claims.

--login

The selector generates a SAML assertion and logs into the relying party web site.

--list-compatible-cards

The selector parses the HTML form of the relying party web site and displays the cards in the keystore which provide the required claims of that site.

--create-card

The selector creates a new card and stores it in the keystore.

--initialize-home

The selector creates a new configuration file, keystore, and schemat local directory, in the .infocards subdirectory of the calling user's HOME directory.

--initialize directory

The selector creates a new configuration file, keystore, and schemat local directory, in the .infocards subdirectory of the specified directory.

--show-all-personas

The selector displays all the personas in the keystore.

--import-persona

The selector imports a new persona from a file into the keystore.

--delete-persona

The selector deletes a specified persona.

--show-all-cards

The selector displays all of the cards in the keystore.

--delete-card

The selector deletes a specified card.

--show-all-rps

The selector displays all relying party state cached in the keystore.

--delete-rp

The selector deleted the specified relying party state from the keystore.

Options

--uri uri

In the --retrieve-claim-types, --retrieve-requirements, --list-compatible-cards, --create-card and --login modes, specifies the URL of the web page containing a HTML or XHTML form.

--import-file uri filename

For use in the --import-persona mode. The uriparameter specifies the URI of the user's identity in the file.

--persona persona

Specifies the alias suffix for the persona.

--send-same-card

For use in the --login mode.

--debug trace|ssl|all

Specifies whether debugging flags should be supplied to the SSL library.

--user-agent str

Overrides the User-Agent: HTTP header.

--cert-accept any|filename

Specifies whether the selector should validate the certificate from the relying party web site.

--configuration-file filename

Specifies the configuration file (default $HOME/.infocards/config.txt).

--encrypted-token-input-file filename

For use when debugging the --login mode: specifies the encrypted token is to be read from the file.

--encrypted-token-output-file filename

For use when debugging the --login mode: copies the generated encypted token to be sent to the relying party to the file.

--assertion-input-file filename

For use when debugging the --login mode: reads the SAML assertion from a file.

--assertion-output-file filename

For use when debugging the --login mode: copies the generated SAML assertion to a file.

--keystore filename

For debugging, overrides the keystore.

--keystore-password password

Specifies the keystore password.

--private-key-alias alias

For debugging, specifies the alias for the private key that signs the assertion.

--certificate-alias alias

For debugging, specifies the alias for the certificate of the card associated with the private key that signs the assertion.

--card-alias alias

Specifies an alias suffix for the card.

--private-key-password password

For debugging, specifies the password for retrieving the private key from the keystore.

--schema-cache-directory pathname

For debugging, specifies the cache directory of the schemat consumer.

--schema-local-directory pathname

For debugging, specifies the local directory of the schemat consumer.