scripted attribute definition produces a null attribute

Peter Schober peter.schober at univie.ac.at
Thu Oct 11 13:01:54 EDT 2012


* Sean McHugh <sean8sean at gmail.com> [2012-10-11 18:56]:
> Sorry if i'm being dense:  my relying party demands that the attribute be
> called:  zonza-groups
> with the dash in it ... they're not flexible enough to change on
> their side since they're using a custom built SAML SP

And I already said:

* Peter Schober <peter.schober at univie.ac.at> [2012-10-11 16:29]:
> No. The attribute's id is internal to the IdP, that's irrelevant and
> invisible to outside parties.

The attribute name an SP gets to see is defined in the name
XML-attribute on an AttributeEncoder XML-element
(resolver:AttributeEncoder/@name, if you speak XPath), nowhere else.

The id XML-attribute on an AttributeDefinition XML-element is internal
to your IdP (resolver:AttributeDefinition/@id in XPath) and can be
anything you want. You refer to this internal name in the attribute
filter.
-peter


More information about the users mailing list