Shib 2 release attribute to SP with a different name

Emily Heiner eheiner at whatcom.edu
Thu Feb 28 12:14:49 EST 2019


Hi, I'm using Shibboleth 2 and am trying to release an attribute to an SP (SAMLTest in this instance) and it keeps passing my email address as "mail" to them, when I want the attribute to be called Email when it is passed to them. I've googled and am frankly stumped.

My attribute-resolver.xml has:
                <resolver:AttributeDefinition xsi:type="ad:Simple" id="SAMLTestEmail" sourceAttributeID="mail">
                                <resolver:Dependency ref="myLDAP" />
                                <resolver:Dependency ref="wccLDAP" />
                                <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" />
                                <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="Email" />
                </resolver:AttributeDefinition>

My attribute-filter.xml has:
             <afp:AttributeFilterPolicy>
                             <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://samltest.id/saml/sp" />

                                <afp:AttributeRule attributeID="SAMLTestEmail">
                                                <afp:PermitValueRule xsi:type="basic:ANY" />
                                </afp:AttributeRule>
         </afp:AttributeFilterPolicy>

Emily Heiner
Software Developer/DBA
Whatcom Community College
Email:   eheiner at whatcom.edu<mailto:eheiner at whatcom.ctc.edu>
Office:  360-383-3425

"There are known knowns; there are things we know that we know. There are known unknowns; that is to say, there are things that we now know we don't know. But there are also unknown unknowns -- there are things we do not know we don't know."
-- United States Secretary of Defense, Donald Rumsfeld

"I just the other day got... an Internet sent by my staff at 10 o'clock in the morning on Friday. I got it yesterday. Why? Because it got tangled up with all these things going on the Internet commercially [...] And again, the Internet is not something that you just dump something on. It's not a big truck. It's a series of tubes."
-- United States Senator, Ted Stevens

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/8291cdeb/attachment.html>


More information about the users mailing list