About attribute setting to the NameID.

[Tomomi]

Hi

I have Shibboleth Idp ver 3.4.
Where do you set the attribute value of the name ID to be passed to SP?

I think below,

1. Pass the mail attribute to "Email" with the following settings.
attribute-resolver.xml

    <AttributeDefinition xsi:type="Simple" id="Email">
        <InputDataConnector ref="myLDAP" attributeNames="mail" />
        <AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:mail" encodeType="false" />
        <AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="Email"
encodeType="false" />
    </AttributeDefinition>

2. Pass "Email" to NameID with the following settings.

saml-nameid.xml

        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
            p:omitQualifiers="true"
           
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
            p:attributeSourceIds="#{ {'Email'} }" />


Is it correct?

If correct, can I set different Name ID of the attribute value to each SP?

Please tell me some idea!

Regards,

Tomomi




--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html