Attributes in the SAML subject

[krrishv]

HI,

I want the attributes in the subject statement. Currently i have below for
the username in attribute resolver.

resolver:AttributeDefinition xsi:type="Template"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" id="concurid"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:resolver="urn:mace:shibboleth:2.0:resolver"><resolver:Dependency
ref="myLDAP" /><Template>               ${sAMAccountName}         
</Template><SourceAttribute>sAMAccountName</SourceAttribute></resolver:AttributeDefinition>

<resolver:AttributeDefinition id="concurnameid" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="concurid"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:resolver="urn:mace:shibboleth:2.0:resolver"><resolver:Dependency
ref="myLDAP" /><resolver:Dependency ref="concurid"
/><resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
/><resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="username"
/></resolver:AttributeDefinition> 


and in Attribute filter i have below.

      </AttributeRule>
        <AttributeRule attributeID="concurnameid">
        <PermitValueRule xsi:type="basic:ANY" /> 
</AttributeRule>

Now i can see it is working fine. I can see the attribute coming properly in
subject as below.

     <saml2:Subject>
            <saml2:NameID
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
                         
NameQualifier="https://win-citrix.krish.com/idp/shibboleth"
                         
SPNameQualifier="https://www.okta.com/saml2/service-provider/sp12ki4awZBWDTLSYVUL"
                          >krish.v</saml2:NameID>    
            <saml2:SubjectConfirmation
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <saml2:SubjectConfirmationData
Address="fe80:0:0:0:d4a8:5302:9e8a:f120%11"
                                              
NotOnOrAfter="2014-01-23T23:03:37.033Z"
                                              
Recipient="https://krish.oktapreview.com/auth/saml20/shibboleth"
                                               />
            </saml2:SubjectConfirmation>
        </saml2:Subject>

Now i want to add additional attributes in subject such as first name and
last name. Is it possible, what would be my attribute config.

Thanks,





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Attributes-in-the-SAML-subject-tp7594281.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.