Persistent NameID's

[Cantor, Scott]

On 12/9/14, 11:35 PM, "Alex Olson" <ako at byu.edu> wrote:


>
>2. If so, what am I doing wrong?

You're building an Attribute that has as its values a NameID object 
instead of just Strings. And 

>Here’s the appropriate portions of attribute-resolver.xml:
>
>    <resolver:AttributeDefinition xsi:type="ad:SAML2NameID" 
>id="eduPersonTargetedID" sourceAttributeID="uid">

(the above is because the type of AttributeDefinition there is SAML2NameID.

>        <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" 
>nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />

Then you're encoding it with a plugin whose expectation is that the 
attribute's values are Strings, and when it calls toString() on the NameID 
object(s), it spits back the address.

If you want to put something in the Subject, you generate a plain old 
Attribute somehow and then apply the SAML2StringNameID encoder as you did.

-- Scott