[EXT] Mail attribute for Slack

[Yeargan, Yancey]

I just went through this with Automated Data Processing (ADP), which demands an employee identification attribute with both Name and FriendlyName set to "PersonImmutableID".


On Jan 12, 2018, at 12:07 PM, Greg Haverkamp <gahaverkamp at lbl.gov<mailto:gahaverkamp at lbl.gov>> wrote:

On Fri, Jan 12, 2018 at 10:00 AM, Peter Schober <peter.schober at univie.ac.at<mailto:peter.schober at univie.ac.at>> wrote:
* Michael Brogan <mbrogan at uw.edu<mailto:mbrogan at uw.edu>> [2018-01-12 18:56]:
> At the UW we've had a few Slack instances running with SSO and our
> IdP. Recently, for a new instance, we were told that the
> requirements have changed and that the IdP must release the mail
> attribute and that it must be asserted with a friendly name of
> "User.Email".

Even looking at friendlyName is a bug on their side, IMO.

No question.

FriendlyName [Optional]
A string that provides a more human-readable form of the attribute's name, which may be useful in cases in which the actual Name is complex or opaque, such as an OID or a UUID. This attribute's value MUST NOT be used as a basis for formally identifying SAML attributes.

--
For Consortium Member technical support, see https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=01%7C01%7CYancey.Yeargan%40untsystem.edu%7C672dddef62ce43fd1b7c08d559e76672%7C70de199207c6480fa318a1afcba03983%7C0&sdata=Ll8RO2h9eGCJLFOhG8XrOF6Rf%2F1KzeJQUhCLKw409Rc%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180112/8a5a18f8/attachment.html>