Question about best practice regarding release of deprecated encodings
Peter Schober
peter.schober at univie.ac.at
Tue Nov 10 15:25:34 EST 2015
* Bellina, Brendan <bbellina at ucla.edu> [2015-11-10 21:03]:
> If the above is a reasonable approach, then would custom attributes be
> used, one for each encoding, or is there a way in the release rule to
> restrict release to a specific encoding so as to avoid duplicates?
The IDP already handles that case in the examples shipped with the
software, e.g.:
<resolver:AttributeDefinition id="givenName" xsi:type="ad:Simple" sourceAttributeID="givenName">
<resolver:Dependency ref="myLDAP" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:givenName" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.5.4.42" friendlyName="givenName" />
</resolver:AttributeDefinition>
If "givenName" is released in the attribute-filter.xml, for SAML2 use
only urn:oid:2.5.4.42 would be in the attribute statement, for SAML1
only only urn:mace:dir:attribute-def:givenName.
-peter
More information about the users
mailing list