Re: Attributes – how to exclude scope

IAM David Bantz dabantz at alaska.edu
Fri Dec 14 16:59:29 EST 2018


Create/release a new attribute without scope (perhaps the underlying
identifier you use to create ePUID);
do not name it eduPersonUniqueId though because it will not be!

David Bantz

On Fri, Dec 14, 2018 at 12:24 PM Kurtz, Anna <anna.kurtz at sdstate.edu> wrote:

> Hello,
>
> We have recently released the eduPersonUniqueID to an SP. We set the ePUID
> to be scoped in the attribute resolver. We are on IdP 3.2.1
>
>
>
> The SP that requires the ePUID is seeing the value as [id value]@[scope]
> and they do not know how to deal with the scope. They just need the [id
> value]. The SP is not able to make any changes to ignore the scope.
>
>
>
> Is there a way in the attribute resolver or filter on our end to change
> how the ePUID is sent to just that one SP? We want to try and exclude the
> scope for them.
>
>
>
> Thank you!
>
> Anna
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181214/788d6eaa/attachment.html>


More information about the users mailing list