Using Metadata in my App

[Cantor, Scott]

On 3/26/13 11:07 AM, "Andy Bennett" <andyjpb at knodium.com> wrote:

>I set up the decoders thusly in attribute-map.xml:
>
>-----
>    <!-- First, the deprecated/incorrect version, decoded as a scoped
>string: -->
>    <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID"
>id="targeted-id">
>        <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>

Right there you are choosing to keep processing the broken form.

>...and I still seem to get some IdPs who's auth comes thru with old
>style targeted-id and no persistent-id.

Yes, that would follow.

> I wanted to get both variables
>when IdPs were sending the old style and I was transforming it into the
>new style in the SP. The intention was to assert that the value parts
>were equal and then migrate.

Ah. No, it can't do that. The purpose of the new decoder was so you can
rekey as part of a migration and then switch the decoders. It can't deal
with a case where you get two different attributes with different values.

If you want both attributes, then the way you're doing it is the way you
would do it.

-- Scott