SP-side attribute filtering based on IdP EntityID
Izz Abdullah
izz.abdullah at wepanow.com
Mon Jun 29 12:10:52 EDT 2015
Good Morning:
We are running Shibboleth 2.5.4 and purely as an SP. I was looking to filter which attributes to process based on a specific IdP entityID using something similar to the Attribute Filters in which an IdP would send to a given SP, in a "simpler" manner than using post-processing hooks. Can this be achieved with rules by attribute-policy or similar?
Use Case:
5 IdPs send the same format for the same urn:oid, but one's format needs to be filtered (let's say sAMAccountName may have an undesired underscore).
That same value without the underscore is in a different urn:oid sent by said IdP.
Unfortunately, that OID is used throughout the application for other reasons and would like to only map this attribute to an environment variable on the SP if IdP entityID = X
I haven't looked a lot at post processing hooks and what is involved and was hoping something simple such as the IdP form of attribute-filter would be available in SP.
Thanks in advance,
Izz
Izz Abdullah
Sr. Systems Engineer
[wepa-email-logo]
[email-icons_03]izz.abdullah at wepanow.com<mailto:izz.abdullah at wepanow.com>
[email-icons_06]Toll Free 1(800)675-7639
[email-icons_05]100 Gilbert Drive | Alabaster, Alabama 35007
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150629/fb64a191/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 2141 bytes
Desc: image001.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20150629/fb64a191/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 130 bytes
Desc: image002.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20150629/fb64a191/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.gif
Type: image/gif
Size: 137 bytes
Desc: image003.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20150629/fb64a191/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.gif
Type: image/gif
Size: 198 bytes
Desc: image004.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20150629/fb64a191/attachment-0003.gif>
More information about the users
mailing list