Shib 2 release attribute to SP with a different name

[Ian Young]

> On 28 Feb 2019, at 17:14, Emily Heiner <eheiner at whatcom.edu> wrote:
> 
> Hi, I’m using Shibboleth 2 and am trying to release an attribute to an SP (SAMLTest in this instance) and it keeps passing my email address as “mail” to them, when I want the attribute to be called Email when it is passed to them. I’ve googled and am frankly stumped.

It's not obvious what you mean by "it keeps passing my email address AS" in the above. I'm going to assume you mean that you're talking to a test SP (at samltest.id <http://samltest.id/>, I guess, which I haven't used myself) and it's using the word "email" when it presents the attribute to you on a web page. Apologies in advance if I am answering the wrong question.


>  My attribute-resolver.xml has:
>                 <resolver:AttributeDefinition xsi:type="ad:Simple" id="SAMLTestEmail" sourceAttributeID="mail">
>                                 <resolver:Dependency ref="myLDAP" />
>                                 <resolver:Dependency ref="wccLDAP" />
>                                 <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" />
>                                 <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="Email" />
>                 </resolver:AttributeDefinition>


The friendlyName of an attribute has no significance to the SP, it's essentially just a comment for human readers of the XML and will be (should be) ignored by software.

The true name of the attribute "on the wire" is (assuming SAML 2) urn:oid:0.9.2342.19200300.100.1.3. That's not how a test SP will present it to you, of course, it will use something human-readable. That almost certainly won't be affected by what you put in friendlyName, however.

So, for example, a test SP might present that attribute as "E-mail address", or "email", or anything it likes. SAML doesn't provide a way for you to influence that presentation, that's in the domain of the application.


    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/bc4211c8/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3870 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/bc4211c8/attachment.p7s>