New attribute filter help
Morris, Andi
amorris at uwic.ac.uk
Fri Sep 30 16:53:15 BST 2011
Hi all,
I've just been asked to release some new attributes for a service that our library uses. The information is in the text below.
For Shibboleth users, we are expecting to receive the following attributes:
> An attribute with a name that matches the regular expression (ignoring case) ".*OASCOPED.URN.MACE.DIR_ATTRIBUTE.DEF.EDUPERSONTARGETEDID.*". The value should be some sort if ID representing the logged in user followed by =@"idpdomain"
So an example would be [OA.OASCOPED.URN.MACE.DIR.ATTRIBUTE.DEF.EDUPERSONTARGETEDID] => wduOx72J9wJAQz7sEZowoBLKpio=@typekey.sdss.ac.uk<mailto:wduOx72J9wJAQz7sEZowoBLKpio=@typekey.sdss.ac.uk>
> An attribute with a name that matches the regular expression".*IDP.ENTITY.*". The value should be the EntityID of the Identity provider.
An example would be [OA_IDP_ENTITY] => https://typekey.sdss.ac.uk/shibboleth
Now, we already release the EDUPERSONTARGETEDID, but not with that expression. Ours is:
<resolver:AttributeDefinition xsi:type="ad:SAML2NameID" id="eduPersonTargetedID"
nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" sourceAttributeID="computedID">
<resolver:Dependency ref="computedID" />
<resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
<resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
</resolver:AttributeDefinition>
Will that work?
Also, is there a way I can release the EntityID as an attribute?
I'm quite new to all this, and have read the attribute section of the documentation, but it's not quite all sunk in yet. Any help would be appreciated.
Cheers,
Andi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110930/969d1428/attachment.html
More information about the users
mailing list