v3.3.1 eduPersonAffiliation and eduPersonScopedAffiliation question

[Peter Smith]

I'm trying to get the eduPersonScopedAffiliation attribute generated and released to SPs, and I have a Script section defined for my eduPersonAffiliation that the Scoped attribute is based on.  I can see that the Scripted attribute is generating values successfully but the Scoped attribute still is 0 value.  Any ideas what I'm doing wrong?  Here is my definition:

    <resolver:AttributeDefinition xsi:type="ad:Script" id="eduPersonAffiliation" >
        <resolver:Dependency ref="employeeType" />
        <resolver:Dependency ref="distinguishedName" />
        <resolver:Dependency ref="eduPersonAffiliation-dummy" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="urn:mace:dir:attribute-def:eduPersonAffiliation" encodeType="false" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" friendlyName="eduPersonAffiliation" encodeType="false" />
        <ad:Script><![CDATA[
            eduPersonAffiliation.getValues().clear(); // remove the dummy value
            if( typeof employeeType != "undefined" && employeeType != null ) {
                eduPersonAffiliation.getValues().add( "employee" );
                eduPersonAffiliation.getValues().add( "staff" );

                if( employeeType.getValues().contains( "faculty" )) {
                    eduPersonAffiliation.getValues().add( "faculty" );
                };
            };

            if( typeof distinguishedName != "undefined" && distinguishedName != null ) {
                if( ! distinguishedName.getValues().contains( "ou=vendors" ) &&
                    ! distinguishedName.getValues().contains( "ou=services" ) ) {

                    eduPersonAffiliation.getValues().add( "member" );
                };
            };
        ]]></ad:Script>
    </resolver:AttributeDefinition>

    <resolver:DataConnector xmlns="urn:mace:shibboleth:2.0:resolver:dc" xsi:type="dc:Static" id="eduPersonAffiliation-dummy">
        <Attribute id="eduPersonAffiliation">
            <Value>dummy</Value>
        </Attribute>
    </resolver:DataConnector>

    <resolver:AttributeDefinition xsi:type="ad:Scoped" id="eduPersonScopedAffiliation" scope="%{idp.scope}" sourceAttributeID="eduPersonAffiliation">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" encodeType="false" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" friendlyName="eduPersonScopedAffiliation" encodeType="false" />
    </resolver:AttributeDefinition>

Thanks,
Peter


________________________________

UT Southwestern


Medical Center



The future of medicine, today.