Shib 2 release attribute to SP with a different name
Emily Heiner
eheiner at whatcom.edu
Thu Feb 28 12:14:49 EST 2019
Hi, I'm using Shibboleth 2 and am trying to release an attribute to an SP (SAMLTest in this instance) and it keeps passing my email address as "mail" to them, when I want the attribute to be called Email when it is passed to them. I've googled and am frankly stumped.
My attribute-resolver.xml has:
<resolver:AttributeDefinition xsi:type="ad:Simple" id="SAMLTestEmail" sourceAttributeID="mail">
<resolver:Dependency ref="myLDAP" />
<resolver:Dependency ref="wccLDAP" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="Email" />
</resolver:AttributeDefinition>
My attribute-filter.xml has:
<afp:AttributeFilterPolicy>
<afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://samltest.id/saml/sp" />
<afp:AttributeRule attributeID="SAMLTestEmail">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
</afp:AttributeFilterPolicy>
Emily Heiner
Software Developer/DBA
Whatcom Community College
Email: eheiner at whatcom.edu<mailto:eheiner at whatcom.ctc.edu>
Office: 360-383-3425
"There are known knowns; there are things we know that we know. There are known unknowns; that is to say, there are things that we now know we don't know. But there are also unknown unknowns -- there are things we do not know we don't know."
-- United States Secretary of Defense, Donald Rumsfeld
"I just the other day got... an Internet sent by my staff at 10 o'clock in the morning on Friday. I got it yesterday. Why? Because it got tangled up with all these things going on the Internet commercially [...] And again, the Internet is not something that you just dump something on. It's not a big truck. It's a series of tubes."
-- United States Senator, Ted Stevens
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/8291cdeb/attachment.html>
More information about the users
mailing list