generating attribute from other attribute in SP

Cantor, Scott cantor.2 at osu.edu
Fri Aug 9 11:15:16 EDT 2013


On 8/9/13 11:12 AM, "Flannery, Sean" <sean.flannery at jwt.com> wrote:

>short version: given attribute companyID coming back from the IDP, I need
>the SP to set a related http header value, companyDN, who's value is
>equal to "empid=${companyID},ou=people,dc=com" where ${companyID} is the
>value of the company ID attribute.

Check the Template plugin in the NativeSPAttributeResolver doc page.

>Most the documentation I'm finding seems to show how to do this at the
>IDP level, not the SP.

Yes, I added the plugin in 2.5.

>This is necessary because, as our org moves off an old SSO solution (to
>shibboleth) some of the legacy apps need more time for the adjustment and
>thus I need to setup one of our SPs to generate all the HTTP headers they
>expect.  Our IDP does not expose this
> companyDN attribute, but I could generate it from the companyID
>attribute.

That's the sort of case envisioned, yes.

-- Scott




More information about the users mailing list