IDP - AtrtibuteResolver - how to map a customAtrribute to Standard SAML attribute

Vignesh, Vanna G. vignesh at musc.edu
Mon Aug 5 17:42:52 EDT 2013


I have a custom attribute in ldap (employee id) and I want to pass the value to standard SAML2 attribute employeeNumber. The resolver works if I pass that to another custom attribute. It is not working for employeeNumber. I have both the mappings in my resolver.xml. The first one works but not the second one.

<resolver:AttributeDefinition id="pvid"  xsi:type="ad:Simple" sourceAttributeID="empID">
               <resolver:Dependency ref="AuthLDAP" />
                <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:oid:1.3.6.1.4.1.17033.1.1.1.2" />
                <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.3.6.1.4.1.17033.1.1.1.2"  friendlyName="pvid" />
</resolver:AttributeDefinition>
<resolver:AttributeDefinition id="employeeNumber" xsi:type="ad:Simple" sourceAttributeID=" empID ">
                <resolver:Dependency ref="AuthLDAP" />
                <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:employeeNumber" />
                <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.16.840.1.113730.3.1.3"  friendlyName="employeeNumber" />
</resolver:AttributeDefinition>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130805/da04b907/attachment-0001.html 


More information about the users mailing list