IDP - AtrtibuteResolver - how to map a customAtrribute to Standard SAML attribute

Vignesh, Vanna G. vignesh at musc.edu
Mon Aug 5 18:13:57 EDT 2013


Scott,

Is there any difference between passing an attribute to a standard SAML2 attribute or to a custom attribute. In my case, passing value to the custom attribute works. In the logs, I could see onlt the custom attribute passed but not employeeNumber.

<resolver:AttributeDefinition id="pvid"  xsi:type="ad:Simple" sourceAttributeID="empID">
               <resolver:Dependency ref="AuthLDAP" />
                <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:oid:1.3.6.1.4.1.17033.1.1.1.2" />
                <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.3.6.1.4.1.17033.1.1.1.2"  friendlyName="pvid" />
</resolver:AttributeDefinition>

<resolver:AttributeDefinition id="employeeNumber" xsi:type="ad:Simple" sourceAttributeID=" empID ">
                <resolver:Dependency ref="AuthLDAP" />
                <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:employeeNumber" />
                <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.16.840.1.113730.3.1.3"  friendlyName="employeeNumber" />
</resolver:AttributeDefinition>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130805/0fe1b6ea/attachment.html 


More information about the users mailing list