Shib 2 release attribute to SP with a different name

[Christopher Bongaarts]

On 2/28/2019 11:14 AM, Emily Heiner wrote:
>
> Hi, I’m using Shibboleth 2 and am trying to release an attribute to an 
> SP (SAMLTest in this instance) and it keeps passing my email address 
> as “mail” to them, when I want the attribute to be called Email when 
> it is passed to them. I’ve googled and am frankly stumped.
>
> My attribute-resolver.xml has:
>
>                                 <resolver:AttributeEncoder 
> xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" 
> friendlyName="Email" />

It is likely that the SP side is using the Name rather than the 
friendlyName (which is the Right Thing to do), and may be mapping the 
OID style identifier to mail (on a Shib SP, that would be in 
attribute-map.xml).  Setting the name="Email" would likely fix that.

I'm guessing this is not a Shib SP, as in that case the SP should just 
change their attribute-map.xml instead of having the IdP do it...


-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/38c597c9/attachment.html>