How to append a string to IdP attribute

[Ashok Kumar]

You may map like the following..

Here domain name is your domain name.


<resolver:AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
    scope="domain-name" sourceAttributeID="uid">

 <resolver:Dependency ref="my_LDAP" />

    <resolver:AttributeEncoder xsi:type="SAML1ScopedString"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        name="urn:mace:dir:attribute-def:eduPersonPrincipalName" />

    <!-- additional definition for use with commercial SAML 1.1 SPs -->
    <resolver:AttributeEncoder xsi:type="SAML1ScopedString"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" scopeType="inline" />

    <resolver:AttributeEncoder xsi:type="SAML2ScopedString"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
friendlyName="eduPersonPrincipalName" />
</resolver:AttributeDefinition>

Thanks,
-Ashok

On Wed, Aug 10, 2011 at 7:02 AM, Cantor, Scott E. <cantor.2 at osu.edu> wrote:

> On 8/10/11 9:26 AM, "Sukesh Nischal" <Sukesh.Nischal at itslearning.com>
> wrote:
> >I¹m trying to create a SAML2 attribute on the IdP using LDAP as a data
> >source. I¹m pulling  in the  sAMAccountName and I want to append a string
> >like ³@domain² to it and map it to eduPersonPrincipalName , so I end up
> >releasing sAMAccountName at domain. I¹ve had a look at the documentation for
> >SAML 2 String Attribute Encoder but I can¹t see how you can do this.
> >Could someone please advise me of the correct syntax I need to put in my
> >attribute-resolver.xml  ?
>
> EPPN is scoped, you need to use the Scoped attribute definition and just
> supply the value to append in the configuration.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110810/ead497aa/attachment-0001.html