How to map subject email address to request header name?

Nate Klingenstein ndk at internet2.edu
Tue Jul 24 11:49:33 EDT 2012


Andrew,

Think I've got this right...

> What should be in attribute-map.xml?

     <Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress 
" id="ShibAuthdUserEmail">
         <AttributeDecoder xsi:type="NameIDAttributeDecoder"  
formatter="$Name" defaultQualifiers="false"/>
     </Attribute>

Or, if you want to validate the scope of the email address, try:

     <Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress 
" id="ShibAuthdUserEmail">
         <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder"  
formatter="$Name" defaultQualifiers="false"/>
     </Attribute>

> And in Shibboleth2.xml?

Nothing special.

Hope I got it,
Nate.


More information about the users mailing list