Configuring Release of Other Identifiers for NameID

[King Huang]

Hi,

I'm trying to configure the release of an attribute like uid (ucid in this specific case) as the subject’s nameid to a certain service provider. I can get attribute released as part of the attributestatement easily enough. But, I’m not having any luck getting it to be returned as the subject’s nameid, instead of the transient id.

The SP is requesting urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified. And, I’ve configured an attribute sourced generator in saml-namedid.xml. But, the IdP always sends a transient id instead.

        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
            p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
            p:attributeSourceIds="#{ {'ucid'} }" />

Does anyone have any pointers for documentation or examples to look at?

Thanks,

King Chung Huang

King Chung Huang ｜ Information Technologies, University of Calgary ｜ ☎ 403-383-3254

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160119/6234d85a/attachment-0001.html>