Capturing SAML Attributes from the IDP

Fri May 31 14:31:36 EDT 2013

Adding to Scott's answer…

These Friendly names are eduPersonScopeAffiliation, eduPersonTargetID, etc… but there are also institution-specific attributes like ‘xyzUserID’ or xyzHousingLocation or the like…

Friendly names are not intended to be unique or used for any purpose beyond human readability.

You should emphasize standardization of SAML attribute names whenever possible.  You're going to end up with something complicated somewhere if you don't.

The simplest and cleanest, other than standardization, would probably be to map multiple SAML attribute names to a single attribute name for consumption by your application using the SP and attribute-map.xml.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddAttribute
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130531/68bf1134/attachment.html 