using Transform AttributeResolver to get first value of multi-value attribute

db@alaska.edu dabantz at alaska.edu
Tue Mar 22 11:51:16 EDT 2016


You can create a new scripted attribute in the IdP attribute resolver based on mail. If you encode it as mail, the SPs to which you release that attribute will see single valued mail attribute.

David.Bantz at me.com
David.Bantz at Alaska.edu


> On Mar 22, 2016, at 06:18, Wesley Schaft <wesley.schaft at gmail.com> wrote:
> 
> Ok, that's why I said "almost the same thing" ;)
> 
> So if I understand correctly, this can't be achieved because our Shib-email attribute is multi-value?
> 
>> On Tue, Mar 22, 2016 at 2:59 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>> > <AttributeResolver type="Transform" source="displayName">
>> >     <Regex match="^(.+) (.+)$" dest="givenName">$1</Regex>
>> >     <Regex match="^(.+) (.+)$" dest="sn">$2</Regex>
>> >     <Regex match="^(.+) (.+)$">$2, $1</Regex>
>> > </AttributeResolver>
>> >
>> > It's almost the same thing I'm trying to achieve; splitting up displayName by a
>> > regex and return the values givenName and sn.
>> 
>> Taking one value of an attribute and turning it into two new attributes. That isn't at all the same thing. A rule operates on one value at a time, always.
>> 
>> -- Scott
>> 
>> 
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160322/ef19b88d/attachment.html>


More information about the users mailing list