change definition of uid name and friendlyname

[XiaoXia Dong]

Thanks Michael, Dave and Scott for your quick response. It is extremely helpful.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: February 23, 2017 1:19 PM
To: Shib Users <users at shibboleth.net>
Cc: Phil Tracy <ptracy at northwestern.edu>
Subject: RE: change definition of uid name and friendlyname

> I realized that this is a global change and it could potentially break 
> some other applications. I like to get opinions from shib experts how 
> risky this change is and whether it is a safe change from SAML2.

I wouldn't suggest using uid with anything, really, but you certainly can't take an existing attribute, change its name, and not break things.

I can't imagine any vendor requiring a URN like that inside FriendlyName. There are SPs that are broken and use FriendlyName, but they'd be looking for simple names, not an OID.

In any case, you do it by either doing what Michael suggested, or in V3 you can attach a second AttributeEncoder that includes a condition that runs that causes it to be ignored for any other SPs.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net