Non-Standard Attribute Release

[Dan Malone]

We have a vendor who is requiring release of a non-standard attribute/value pair.
The attribute is uniqueIdentifier.
We have already pointed out to the vendor that the eduPerson documentation specifically says to avoid using this attribute, but they told us "It's not possible to make any change to this attribute mapping."
One option we have is to push back, but at this time, we are going with option 2: make it work.

So, I'd like to do this in a way that we can release the attribute with the least amount of impact to the rest of our infrastructure, and I don't want this to come back and bite us in the future.
This seems fairly easy to do in our Shibboleth configuration, below, but I am looking for feedback.
We have the value needed in a different attribute and I want to the overloading of this attribute to be specific to this vendor.
Will this work and/or is there a better way?

Thanks,
Dan

attribute-resolver.xml

    ...
         <resolver:AttributeDefinition xsi:type="ad:Simple" id="parchmentComStudentID" sourceAttributeID="calstateEduPersonEmplid">
             <resolver:Dependency ref="myLDAP" />
             <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:oid:0.9.2342.19200300.100.1.44" />
             <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.44" friendlyName="uniqueIdentifier" />
         </resolver:AttributeDefinition>
    ...




attribute-filter.xml

    ...
         <afp:AttributeFilterPolicy>
             <afp:PolicyRequirementRule xsi:type="basic:OR" >
                   <basic:Rule xsi:type="basic:AttributeRequesterString" value="sso.parchment.com" />
                   <basic:Rule xsi:type="basic:AttributeRequesterString" value="qa-sso.parchment.com" />
             </afp:PolicyRequirementRule>

             <!-- parchmentCom Attributes -->

             <afp:AttributeRule attributeID="parchmentComStudentID">
                 <afp:PermitValueRule xsi:type="basic:ANY" />
             </afp:AttributeRule>

             ...

         </afp:AttributeFilterPolicy>
    ...




-- 
Dan Malone
dmalone at calpoly.edu
Cal Poly State University - San Luis Obispo

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150609/10fba721/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3687 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20150609/10fba721/attachment.p7s>