custom NameIDQualifier in IdPv3

[Cantor, Scott]

On 10/27/15, 3:26 PM, "users on behalf of David Langenberg" <users-bounces at shibboleth.net on behalf of davel at uchicago.edu> wrote:



>In IdPv2 when I had to set a custom NameIDQualifier that was easily done on the NameIDEncoder.  What's the process for v3?

Customizing it for a custom NameID format sourced from attributes is just controlled on the generator bean. Up in the hierarchy is an API class named org.opensaml.saml.common.profile.AbstractNameIdentifierGenerator and you can set the qualifier(s) as properties on that class.

There are a lot of other fancy ways like injecting functions that compute it, but if you just want to blindly set it, it should honor that.

Doing it for Transient or Persistent would be similar, but those are refs in the config, so you'd be forced to actually declare your own beans for those formats. That's deliberate because those formats have specific rules for what the qualifiers must be so you're essentially violating the standard by setting them to something else.

-- Scott