urn:mace:dir:attribute-def:eduPersonTargetedID only username part not scope

damian.hall at canterbury.ac.uk damian.hall at canterbury.ac.uk
Wed Oct 17 08:05:36 EDT 2012


Hi Peter, 

Thank you for your comments.

We are currently using ADFS as the IDP and we are sending back the
following transformation:

Adfs attribute received:
http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountna
me

Claim issued:   issue(Type =
"urn:mace:dir:attribute-def:eduPersonTargetedID", Value =
"test at mydomain.ac.uk")

When shibboleth receives this using the;

   <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID"
id="targeted-id">
	<AttributeDecoder xsi:type="ScopedAttributeDecoder"/>

It displays the targeted-id as test at mydomain.ac.uk when viewed with the
Shibboleth.sso/Session.

Could you give an example as to how I could just extract the <test> part
from the attribute, if this isn't the correct attribute to use 
to achieve this could you indicate what I should be using.

Many thanks in advance.

Damian	

-----Original Message-----
From: Hall, Damian (damian.hall at canterbury.ac.uk) 
Sent: 17 October 2012 12:28
To: 'users at shibboleth.net'
Cc: Hall, Damian (damian.hall at canterbury.ac.uk)
(damian.hall at canterbury.ac.uk)
Subject: urn:mace:dir:attribute-def:eduPersonTargetedID only username
part not scope

I am currently using Shibboleth 2.5.0 and am having an issue trying to
transform the urn:mace:dir:attribute-def:eduPersonTargetedID to just
output the username part.

Currently the value getting passed back to the Shibboleth SP is
username\@domain, I cant seem to figure out how to filter the attribute
using the NameIDFromScopedAttributeDecoder. The final output should just
be the username, this then gets set in the REMOTE_USER field within my
server variables.

Any suggestions / help would be very grateful,

Many thanks
Damian




More information about the users mailing list