Handling a multi-value attribute question

[David Langenberg]

Well, I hate to suggest this, and yes, I am *extremely*
well acquainted with the problems of following this suggestion, but you
could get displayName (if they offer it) and parse it out into the parts
you need.  Parsing will work about 90% of the time if your client's
user-base is mostly US citizens.  However, as I'm sure my cohorts on this
list will quickly point out there's thousands of ways parsing can and does
break.  Therefore, you probably want to build some logic for handling
exceptions when the parser breaks up the name wrong.  The best alternative
though is have the IdP send you the broken up name in custom attributes,
but I believe you already said they won't do that.

Dave


On Thu, Dec 6, 2012 at 9:52 AM, Mike Flynn <shibbolethlynda at yahoo.com>wrote:

> I need the separated values.  I had stated that previously.
>
>   ------------------------------
> *From:* David Bantz <dabantz at alaska.edu>
> *To:* Shib Users <users at shibboleth.net>
> *Sent:* Thursday, December 6, 2012 8:47 AM
> *Subject:* Re: Handling a multi-value attribute question
>
> He doesn't currently have displayName, so currently needs to combine
> givenName and sn
> in a certificate of completion.  displayName would be an alternative to
> use in
> something like a certificate with the person's name.  Presumably the
> certificate is
> not issued to just "Peter" or "Jane" but  "Peter Smith" or "Jane Mason" -
> the sort
> of string that displayName provides.
>
> David Bantz
>
>
> On Thu, 6 Dec 2012, at 07:24 , Peter Schober <peter.schober at univie.ac.at>
> wrote:
>
> > * David Bantz <dabantz at alaska.edu> [2012-12-06 17:10]:
> >> On Thu, 6 Dec 2012, at 06:20 , Mike Flynn <shibbolethlynda at yahoo.com>
> wrote:
> >>> Well, [givenName] is used as more than a greeting for the user -
> >> That was just one example.  Another is the user's certificates of
> >> completion that uses these values separately.
> >>
> >> That seems to be a good place to use displayName (which IS
> single-valued).
> >
> > How does that go together with Mike saying "uses these values
> > separately" just above?
> > -peter
> > --
> > To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121206/7122aeec/attachment.html