change definition of uid name and friendlyname

[XiaoXia Dong]

Hello Shib Experts,

We have a vendor which does not work with the out of box definition of uid,

Here is the original one:

   <resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="uid">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
    </resolver:AttributeDefinition>


In order to make this particular app work, I need to swap the name and friendlyName of uid,

 <resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="uid">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="uid" friendlyName="urn:oid:0.9.2342.19200300.100.1.1" />
    </resolver:AttributeDefinition>


I realized that this is a global change and it could potentially break some other applications. I like to get opinions from shib experts how risky this change is and whether it is a safe change from SAML2.

Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170223/4d817655/attachment.html>