How to map subject email address to request header name?
Nate Klingenstein
ndk at internet2.edu
Tue Jul 24 11:49:33 EDT 2012
Andrew,
Think I've got this right...
> What should be in attribute-map.xml?
<Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
" id="ShibAuthdUserEmail">
<AttributeDecoder xsi:type="NameIDAttributeDecoder"
formatter="$Name" defaultQualifiers="false"/>
</Attribute>
Or, if you want to validate the scope of the email address, try:
<Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
" id="ShibAuthdUserEmail">
<AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder"
formatter="$Name" defaultQualifiers="false"/>
</Attribute>
> And in Shibboleth2.xml?
Nothing special.
Hope I got it,
Nate.
More information about the users
mailing list