Releasing attribute to SP's with 2 different source dependencies

Klingenstein, Nate nklingenstein at calstate.edu
Tue Nov 29 17:14:53 EST 2016


Gary,

> As usual there is one who hasn't

One?

>  <resolver:AttributeDefinition id="eduPersonPrincipalName" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
>    sourceAttributeID="csuPartyId">
>    <resolver:DisplayName xml:lang="en">Global Username (EPPN)</resolver:DisplayName>

I can assure you that none of this is lost on one of the several CSU's in the Northern Hemisphere.  No parties at the Chancellor's Office, though.

> Do you just give it another name but use the same encoder definitions?  Would this work as shown below?

Yes, precisely, and selectively release EPPN-CSUpartyID to all the party SP's, while the rest of us get eduPersonPrincipalName, which is in turn sourced from uid.

Take care,
Nate.


More information about the users mailing list