Attributes being removed from SAML1 Service Provider because they cannot be encoded.

Cantor, Scott E. cantor.2 at osu.edu
Tue Aug 2 18:36:54 BST 2011


On 8/2/11 1:28 PM, "Cantor, Scott E." <cantor.2 at osu.edu> wrote:
>
>>I'm kinda lost here. Do I define a new parameter as a SAML1String using
>>the OID and how do I push those attributes via SAML1?
>
>You may be able to add a a second SAML 1 encoder to the existing EPPN
>definition with the OID specified and it will generate both.

This works, my way was just extra work.

e.g.

<resolver:AttributeDefinition xsi:type="ad:Scoped"
id="eduPersonPrincipalName"
	scope="osu.edu" sourceAttributeID="name">
	<resolver:Dependency ref="account" />

	<resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString"
	name="urn:mace:dir:attribute-def:eduPersonPrincipalName" />
	<resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString"
  	name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" scopeType="inline" />
	<resolver:AttributeEncoder xsi:type="enc:SAML2ScopedString"
	name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
	friendlyName="eduPersonPrincipalName" />
    </resolver:AttributeDefinition>


-- Scott



More information about the users mailing list