scripted attribute definition produces a null attribute
Peter Schober
peter.schober at univie.ac.at
Thu Oct 11 13:01:54 EDT 2012
* Sean McHugh <sean8sean at gmail.com> [2012-10-11 18:56]:
> Sorry if i'm being dense: my relying party demands that the attribute be
> called: zonza-groups
> with the dash in it ... they're not flexible enough to change on
> their side since they're using a custom built SAML SP
And I already said:
* Peter Schober <peter.schober at univie.ac.at> [2012-10-11 16:29]:
> No. The attribute's id is internal to the IdP, that's irrelevant and
> invisible to outside parties.
The attribute name an SP gets to see is defined in the name
XML-attribute on an AttributeEncoder XML-element
(resolver:AttributeEncoder/@name, if you speak XPath), nowhere else.
The id XML-attribute on an AttributeDefinition XML-element is internal
to your IdP (resolver:AttributeDefinition/@id in XPath) and can be
anything you want. You refer to this internal name in the attribute
filter.
-peter
More information about the users
mailing list