Attribute contains multiple values from IdP

[Izz Noland]

Thanks Scott.  That's what I thought.  We will handle this within our code then.

Thanks again!

Izz Noland
Sr. Systems Engineer

izz.noland at wepanow.com
Toll Free 1(800)675-7639
100 Gilbert Drive | Alabaster, Alabama 35007

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, August 18, 2015 12:00 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Attribute contains multiple values from IdP

On 8/18/15, 12:41 PM, "users on behalf of Izz Noland" <users-bounces at shibboleth.net on behalf of izz.noland at wepanow.com> wrote:

>I’ve searched the documentation for SP, and have yet to find a way where shibboleth itself can split / trim values from an attribute that contains more than one value.  For example, we have an IdP sending multiple values, delimited by a semicolon within the eppn attribute.

Well, that's the SP expressing the multiple values that it received by delimiting them. That can happen because an actual multi-valued SAML attribute is received, or because there are multiple SAML attributes mapped to one attribute name/header in the SP configuration.

>Is there something I am missing where the SP will take only the first passed value of the attribute or am I going to have to trim this value at the semicolon?

There is no option in the SP for turning a multi-valued set of data into one value.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net