urn:mace:dir:attribute-def:eduPersonTargetedID only username part not scope
damian.hall at canterbury.ac.uk
damian.hall at canterbury.ac.uk
Wed Oct 17 08:05:36 EDT 2012
Hi Peter,
Thank you for your comments.
We are currently using ADFS as the IDP and we are sending back the
following transformation:
Adfs attribute received:
http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountna
me
Claim issued: issue(Type =
"urn:mace:dir:attribute-def:eduPersonTargetedID", Value =
"test at mydomain.ac.uk")
When shibboleth receives this using the;
<Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID"
id="targeted-id">
<AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
It displays the targeted-id as test at mydomain.ac.uk when viewed with the
Shibboleth.sso/Session.
Could you give an example as to how I could just extract the <test> part
from the attribute, if this isn't the correct attribute to use
to achieve this could you indicate what I should be using.
Many thanks in advance.
Damian
-----Original Message-----
From: Hall, Damian (damian.hall at canterbury.ac.uk)
Sent: 17 October 2012 12:28
To: 'users at shibboleth.net'
Cc: Hall, Damian (damian.hall at canterbury.ac.uk)
(damian.hall at canterbury.ac.uk)
Subject: urn:mace:dir:attribute-def:eduPersonTargetedID only username
part not scope
I am currently using Shibboleth 2.5.0 and am having an issue trying to
transform the urn:mace:dir:attribute-def:eduPersonTargetedID to just
output the username part.
Currently the value getting passed back to the Shibboleth SP is
username\@domain, I cant seem to figure out how to filter the attribute
using the NameIDFromScopedAttributeDecoder. The final output should just
be the username, this then gets set in the REMOTE_USER field within my
server variables.
Any suggestions / help would be very grateful,
Many thanks
Damian
More information about the users
mailing list