Set attribute based on multiple sourceAttributeIds

[Klingenstein, Nate]

Juan,

Yes, that's very possible, along with almost anything else you can imagine.

Personally, I'd do this with a Script attribute that implemented that very simple logic: specialEmail ~= "if !null A, use A, else, use B"

https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition

Then release that particular Script attribute to this SP with a dedicated filter.

There are many other ways, but this will give you the most flexibility by far.

Thanks,
Nate.

On Oct 5, 2016, at 10:16 AM, Juan Padilla <juan.padilla at nxp.com<mailto:juan.padilla at nxp.com>> wrote:

is it possible to configure attribute-resolver.xml to set and release an attribute based on the existence of multiple LDAP attributes? For example, I want to release an "email" attribute to the service provider: if LDAP has an attribute and value for "alt_email" then use that value ... otherwise use the value in LDAP attribute "email" (which will always exist).

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161005/9a2f5217/attachment.html>