Multiple Attribute Elements

Peter Schober peter.schober at univie.ac.at
Mon Jan 26 15:20:51 EST 2015


* Stephen McIntyre <openamstudent at gmail.com> [2015-01-26 19:50]:
>         <resolver:AttributeEncoder xsi:type="enc:SAML1String"
> name="urn:mace:dir:attribute-def:myUID" />

Also note that you can't just make up attribute names in someone
else's namespace (MACE-Dir's legacy namespace, in this case). I know
this is meant to be an example but it's a bad one as such.
Since you claim to care about friendlyName I doubt the SP in question
speaks SAML1, in which case just don't define an encoder for SAML1.

> My plan is to send myUID to one entity (it's this way for historical
> purposes) and myUserName to a different entity. However, besides sharing
> the same sourceAttributeID, they also share the same name (i.e.
> 'urn:oid:1.3.6.1.4.1.5923.1.1.1.6', just a throw-away example), though
> their friendlyNames are different. Will this pose problems for the
> Shibboleth IDP I define this in?

Not, they're seperate AttributeDefinitions to the IDP. But it hints at
an SP that's violating the SAML spec by looking at the friendlyName
instead of Name + NameFormat.
-peter


More information about the users mailing list