Persistent NameID's

[Alex Olson]

Hi!

I’m trying to release an attribute as a SAML2NameID to an SP but what the SP sees is generally a string like the following: org.opensaml.saml2.core.impl.NameIDImpl at 6b13c116

I understand I should be generating a persistent nameID  via a StoredID but for test purposes I just want to release a non-obfuscated attribute to the SP as the persistent nameID.


  1.  Is this even possible?
  2.  If so, what am I doing wrong?

Here’s the appropriate portions of attribute-resolver.xml:

    <resolver:AttributeDefinition xsi:type="ad:SAML2NameID" id="eduPersonTargetedID" sourceAttributeID="uid">
        <resolver:Dependency ref="byuDataSource" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
    </resolver:AttributeDefinition>

byuDataSource is a valid and working data connector and “uid” contains a string.

Here’s the appropriate portion of our AttributeFilterPolicy in attribute-filter.xml where we’re releasing this attribute:
        <afp:AttributeRule attributeID="eduPersonTargetedID">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

Thanks!
Alex K. Olson
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141209/c38bee6d/attachment.html