Shib 2 release attribute to SP with a different name

[Ian Young]

> On 28 Feb 2019, at 17:34, Emily Heiner <eheiner at whatcom.edu> wrote:
> 
> I’m looking at the SAMLTest SP log and it’s getting the attribute passed, but not displaying in the results as an attribute that was successfully passed:
> <saml2:Attribute FriendlyName="Email" Name="Email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance <http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">eheiner at whatcom.edu <mailto:eheiner at whatcom.edu></saml2:AttributeValue></saml2:Attribute>
>  
> Do I need to change the NameFormat as well?



The Name and NameFormat together define the formal attribute you're talking about. The friendlyName is just a comment for humans and has no significance to software.

If you want to talk about the standardised e-mail attribute, you have use the standardised values for Name and NameFormat. If you use other values, an SP that expects the e-mail attribute to have the standardised Name and NameFormat won't know what you're referring to, and will just ignore what you're sending entirely, which sounds like what is happening.

I think the other aspects of this are already covered in the mail I just sent 30 seconds ago ;-)

    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/1093402b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3870 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/1093402b/attachment.p7s>