Help on unspecified nameID (IdP ver 3.2.x)

Cantor, Scott cantor.2 at osu.edu
Sun Apr 9 12:28:41 EDT 2017


On 4/7/17, 10:17 PM, "users on behalf of Lalith Jayaweera" <users-bounces at shibboleth.net on behalf of ljayaweera at gmail.com> wrote:

> Just to clarify, what do you meant by 'You'd have to release uid to that SP' ? 

Release the uid attribute to the SP.

> Does not require anything in attribute section.... 

Then you'll have to change the generator as the documentation mentions to pull from the unfiltered attribute set.

> or also do we have examples on how to configure the generator to achieve it? 

"The process above requires that you explicitly release the attribute to use as a source in your filter policy. If you wish, you can avoid this step by using a generator property (useUnfilteredAttributes) that allows an unreleased attribute to be used as a source, but note that doing so creates a sort of "pseudo-policy" exposing information to an SP outside of the normal filtering process."

-- Scott




More information about the users mailing list