change definition of uid name and friendlyname

Cantor, Scott cantor.2 at osu.edu
Thu Feb 23 14:19:07 EST 2017


> I realized that this is a global change and it could potentially break some other
> applications. I like to get opinions from shib experts how risky this change is
> and whether it is a safe change from SAML2.

I wouldn't suggest using uid with anything, really, but you certainly can't take an existing attribute, change its name, and not break things.

I can't imagine any vendor requiring a URN like that inside FriendlyName. There are SPs that are broken and use FriendlyName, but they'd be looking for simple names, not an OID.

In any case, you do it by either doing what Michael suggested, or in V3 you can attach a second AttributeEncoder that includes a condition that runs that causes it to be ignored for any other SPs.

-- Scott



More information about the users mailing list