Question about best practice regarding release of deprecated encodings

Peter Schober peter.schober at univie.ac.at
Tue Nov 10 15:25:34 EST 2015


* Bellina, Brendan <bbellina at ucla.edu> [2015-11-10 21:03]:
> If the above is a reasonable approach, then would custom attributes be
> used, one for each encoding, or is there a way in the release rule to
> restrict release to a specific encoding so as to avoid duplicates?

The IDP already handles that case in the examples shipped with the
software, e.g.:

   <resolver:AttributeDefinition id="givenName" xsi:type="ad:Simple" sourceAttributeID="givenName">
     <resolver:Dependency ref="myLDAP" />
     <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:givenName" />
     <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.5.4.42" friendlyName="givenName" />
   </resolver:AttributeDefinition>

If "givenName" is released in the attribute-filter.xml, for SAML2 use
only urn:oid:2.5.4.42 would be in the attribute statement, for SAML1
only only urn:mace:dir:attribute-def:givenName.
-peter


More information about the users mailing list