[java-idp-oidc] branch master updated: Remove SAML encoders from sample file.

Scott Cantor cantor.2 at osu.edu
Fri Jan 17 16:16:17 EST 2020


This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=ee0456d4605fe966cb7ee2c01a3713b595131a00

The following commit(s) were added to refs/heads/master by this push:
       new  ee0456d   Remove SAML encoders from sample file.
ee0456d is described below

commit ee0456d4605fe966cb7ee2c01a3713b595131a00
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Jan 17 16:16:14 2020 -0500

    Remove SAML encoders from sample file.
---
 .../src/main/resources/conf/attribute-resolver-oidc.xml   | 15 +--------------
 1 file changed, 1 insertion(+), 14 deletions(-)

diff --git a/idp-oidc-extension-distribution/src/main/resources/conf/attribute-resolver-oidc.xml b/idp-oidc-extension-distribution/src/main/resources/conf/attribute-resolver-oidc.xml
index 96d6323..eb0aaa0 100644
--- a/idp-oidc-extension-distribution/src/main/resources/conf/attribute-resolver-oidc.xml
+++ b/idp-oidc-extension-distribution/src/main/resources/conf/attribute-resolver-oidc.xml
@@ -44,22 +44,12 @@
         the long term implications. This demonstrates use of OIDCScopedString encoder. -->
     <AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}">
         <InputAttributeDefinition ref="uid" />
-        <AttributeEncoder xsi:type="SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonPrincipalName"
-            encodeType="false" />
-        <AttributeEncoder xsi:type="SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
-            friendlyName="eduPersonPrincipalName" encodeType="false" />
         <AttributeEncoder xsi:type="oidcext:OIDCScopedString" name="eppn" />
     </AttributeDefinition>
 
     <!-- The uid is the closest thing to a "standard" LDAP attribute representing a local username, but you should generally 
         *never* expose uid to federated services, as it is rarely globally unique. -->
-    <AttributeDefinition id="uid" xsi:type="PrincipalName">
-        <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" />
-        <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid"
-            encodeType="false" />
-    </AttributeDefinition>
-
-
+    <AttributeDefinition id="uid" xsi:type="PrincipalName" />
 
     <!-- examples of claim splitting by defining two different email claim definitions -->
 
@@ -68,9 +58,6 @@
         encoder. -->
     <AttributeDefinition id="email" xsi:type="Template">
         <InputAttributeDefinition ref="uid" />
-        <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />
-        <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail"
-            encodeType="false" />
         <AttributeEncoder xsi:type="oidcext:OIDCString" name="email" />
         <Template><![CDATA[
                ${uid}@example.org

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list