Scoped attributes and multiple DataConnectors

[Peter Schober]

* eheiner <eheiner at whatcom.ctc.edu> [2015-07-30 00:28]:
> I'm trying to get the following attribute to work on both myLDAP and
> wccLDAP. It is a scoped attribute, which seems to be the only way to get it
> to work in the first place (I'm a novice with Shibboleth).
> 
> 	<resolver:AttributeDefinition xsi:type="ad:Scoped"
> id="eduPersonPrincipalName" scope="orca.whatcom.ctc.edu"
> sourceAttributeID="employeeID">
>         <resolver:Dependency ref="myLDAP" />
>         <resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString"
> name="urn:mace:dir:attribute-def:eduPersonPrincipalName" />
>         <resolver:AttributeEncoder xsi:type="enc:SAML2ScopedString"
> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
> friendlyName="eduPersonPrincipalName" />
>     </resolver:AttributeDefinition>
> 
> How can I duplicate this attribute to work with the other
> domain/scope?

If the eduPersonPrincipalName values should share the same scope (no
matter what directory server the data came from) then you add
<resolver:Dependency> elements for both data connectors to the
attribute definition.
If the scopes need to be different, you'll create two attribute
definitions with seperate scopes, and have each depend on the correct
data connector.

Of course if you tell us what "it" is in the sentence
> which seems to be the only way to get it to work
we might be able to suggest other ways of doing things.
-peter