Custom attributes to the IdP

Sowmya Vallabhajosyula sowmya.v at
Wed May 4 09:48:45 EDT 2016


Thanks for the quick reply. I just subscribed to the mail list - is there a
website link to see Douglas' answer or can you please forward it?

On Wed, May 4, 2016 at 7:05 PM, Peter Schober <peter.schober at>

> * Sowmya Vallabhajosyula <sowmya.v at> [2016-05-04 15:14]:
> > If I would like to send an extra custom attribute to IdP which I
> > would like to use as ou partition of ldap. How can I achieve this?
> You want to send some part of the LDAP object's DN as a SAML
> Attribute? See Douglas' answer from yesterday about the 'entryDN'
> operational attribute. If your LDAP DSA does not support that I think
> the LDAP middleware used in the Shibboleth IDP can produce something
> with the same value internally, check the documentation.
> Once you have that pulled into an IDP internal attribute you can
> create a Script type attribute defintion that parses out the value
> you're looking for.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at

Thanks and Regards,
Sowmya Vallabhajosyula
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list