Issue with releasing eduPersonPrincipalName to Specific SP

[Brent Putman]

On 4/26/17 6:05 PM, Brent Putman wrote:
>
> So does an encoder of SAML2ScopedString work with an
> AttributeDefintion of type Simple, as the OP has it?  Maybe that's
> the problem.  If he wants to base on 'userPrincipalName' (from AD,
> etc), which is already a scoped string, maybe he needs to switch
> encoder to type SAML2String?  I always forget how the scoped vs
> non-scoped stuff works.

Actually, reviewing the docs, maybe he needs to change the
AttributeDefinition to Prescoped and use the SAML2ScopedString encoder?

That's consistent with the example here:

https://wiki.shibboleth.net/confluence/display/IDP30/PrescopedAttributeDefinition
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170426/2da37860/attachment-0001.html>