Surpressing SPnamequalifier from an IdP response
Dave Perry
Dave.Perry at hull-college.ac.uk
Thu May 19 05:40:31 EDT 2016
Thanks Scott.
Is this how you do it?
<bean parent="shibboleth.SAML2AttributeSourcedGenerator"
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
p:attributeSourceIds="#{ {'google-principal'} }"
p:omitQualifiers="false">
I tried that and it still sends the qualifier.
Dave
_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group
Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930
* Need a fast reply? Try elearning at hull-college.ac.uk *
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: 12 May 2016 16:20
To: Shib Users
Subject: RE: Surpressing SPnamequalifier from an IdP response
> Dave, I have a quick questions, by any chances is there any way that
> you can take out these elements out of the NameID element:
Looks like the only simple way they can get omitted is if they're defaulted (they have to match the IdP and SP names, which normally is the case) and if you then set the omitQualifiers boolean property on the NameID generator you configure.
In more advanced cases there are lookup stategy functions that can be configured on the generator bean that would be able to return null explicitly for the two values.
-- Scott
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
**********************************************************************
This message is sent in confidence for the addressee
only. It may contain confidential or sensitive
information. The contents are not to be disclosed
to anyone other than the addressee. Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission. Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College. Nothing in this
message should be construed as creating a contract.
Hull College Group owns the email infrastructure, including the contents.
Hull College Group is committed to sustainability, please reflect before printing this email.
**********************************************************************
TEXT
More information about the users
mailing list