On 12/21/2011 1:48 PM, Daniel A. Ramaley wrote:
> I'm not sure how to change it to do what i need, though. I'm not sure
> what LDAP attribute it pulls, or how to change it to mailuid. I tried
> just adding a sourceAttributeID and setting a dependency, but that
> didn't work:
Don't modify principalId, make your own:
<resolver:AttributeDefinition id="mailuidNameId"
sourceAttributeID="mailuid"
xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad">
<resolver:Dependency ref="yourLDAP" />
<resolver:AttributeEncoder xsi:type="SAML1StringNameIdentifier"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /
>
</resolver:AttributeDefinition>
--
%% Christopher A. Bongaarts %% cab at umn.edu %%
%% OIT - Identity Management %% http://umn.edu/~cab %%
%% University of Minnesota %% +1 (612) 625-1809 %%