Is there a way to use 2 name idendifiers?

Paul Hethmon paul.hethmon at
Mon Sep 12 16:00:28 BST 2011

Yes. You'll simply create multiple attribute definitions of type PrincipalName and given them each a unique ID. That's in attribute-resolver.xml. Then in attribute-filter.xml, you'll key on the SP entityID to release the appropriate nameID value. The wiki has full details.



Paul Hethmon
Chief Software Architect
Clareity Security, LLC
o) 865.824.1350
c) 865.250.3517
e) paul.hethmon at

From: dave massie <dave.massie at<mailto:dave.massie at>>
Reply-To: Shibboleth Users <users at<mailto:users at>>
Date: Mon, 12 Sep 2011 10:52:05 -0400
To: Shibboleth Users <users at<mailto:users at>>
Subject: Is there a way to use 2 name idendifiers?

I am using shibb v2.1.5 and I want to create 2 name identifiers and I want to be able to send one of the name id's to one group of SP's and the other name id to another group of SP's.

Because we have no backend database, we are limited to using name ID types of unspecified.

Based on  this, is it possible to "filter" name ID's such they are exposed to specific SP's?


-- To unsubscribe from this list send an email to users-unsubscribe at<mailto:users-unsubscribe at>
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the users mailing list