How to append a string to IdP attribute

[Sukesh Nischal]

Thanks Ashok

That worked perfectly!

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Ashok Kumar
Sent: 10 August 2011 18:14
To: Shib Users
Subject: Re: How to append a string to IdP attribute

You may map like the following..

Here domain name is your domain name.


<resolver:AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
    scope="domain-name" sourceAttributeID="uid">

 <resolver:Dependency ref="my_LDAP" />

    <resolver:AttributeEncoder xsi:type="SAML1ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        name="urn:mace:dir:attribute-def:eduPersonPrincipalName" />

    <!-- additional definition for use with commercial SAML 1.1 SPs -->
    <resolver:AttributeEncoder xsi:type="SAML1ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" scopeType="inline" />

    <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="eduPersonPrincipalName" />
</resolver:AttributeDefinition>

Thanks,
-Ashok
On Wed, Aug 10, 2011 at 7:02 AM, Cantor, Scott E. <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:
On 8/10/11 9:26 AM, "Sukesh Nischal" <Sukesh.Nischal at itslearning.com<mailto:Sukesh.Nischal at itslearning.com>>
wrote:
>I¹m trying to create a SAML2 attribute on the IdP using LDAP as a data
>source. I¹m pulling  in the  sAMAccountName and I want to append a string
>like ³@domain² to it and map it to eduPersonPrincipalName , so I end up
>releasing sAMAccountName at domain. I¹ve had a look at the documentation for
>SAML 2 String Attribute Encoder but I can¹t see how you can do this.
>Could someone please advise me of the correct syntax I need to put in my
>attribute-resolver.xml  ?
EPPN is scoped, you need to use the Scoped attribute definition and just
supply the value to append in the configuration.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>



--






-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110811/b509efc0/attachment.html