NameID as a Function of RP

Cantor, Scott cantor.2 at osu.edu
Mon Jul 11 09:09:02 EDT 2016


> I have a use case for sending a specific emailAddress format NameID to a
> SAML2 RP (Google Apps if it matters). I can imagine using
> AttributeSourcedSAML2NameIDGenerator whose source attribute is a
> scripted attribute definition that switches on the target RP. Is that the best
> way to go about this? Alternatives?

You can put the conditional in either the resolver or in the generator bean as an activation condition, just depends how you prefer to do it. Changing the generator is simpler, generally, if you have to change it frequently, but otherwise it's just personal preference.

-- Scott



More information about the users mailing list