omit SPNameQualifier from NameID?

Cantor, Scott cantor.2 at osu.edu
Thu Jul 13 16:38:08 EDT 2017


> Is there a way to either set the SPNameQualifier in a NameID?  Like
> p:additionalAudiencesForAssertion for the assertion?  Or to remove it from
> the NameID altogether?

One of the examples under custom NameID generation in the wiki includes the property to omit them:

    <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
        p:omitQualifiers="true"
        p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
        p:attributeSourceIds="#{ {'mail', 'othermail'} }" />

There probably is a property to set it, or a function property to derive it, the javadoc isn't in front of me at the moment.

-- Scott



More information about the users mailing list