Shib 2 release attribute to SP with a different name
Andrew Morgan
morgan at orst.edu
Thu Feb 28 13:43:34 EST 2019
On Thu, 28 Feb 2019, Cantor, Scott wrote:
> On 2/28/19, 1:38 PM, "users on behalf of Emily Heiner" <users-bounces at shibboleth.net on behalf of eheiner at whatcom.edu> wrote:
>
>> I don't want the formal attribute name though, I want it to be named Email when it comes across. I'm guessing what
>> you found will pass it as Email instead of the formal "mail" attribute name as specified by the OID. All of this stems
>> from Adobe's SP that we're trying to integrate with, which requires the email address to be sent as "Email" rather
>> than "mail".
>
> That is NOT true. They do not require a non-standard name.
Maybe it is just Adobe's docs then? We have the following (working) with
Adobe:
<!-- Adobe attributes -->
<AttributeDefinition xsi:type="Simple" id="adobe_firstname">
<InputDataConnector ref="ONIDLDAP" attributeNames="givenName" />
<AttributeEncoder xsi:type="SAML2String" name="FirstName" />
</AttributeDefinition>
<AttributeDefinition xsi:type="Simple" id="adobe_lastname">
<InputDataConnector ref="ONIDLDAP" attributeNames="sn" />
<AttributeEncoder xsi:type="SAML2String" name="LastName" />
</AttributeDefinition>
<AttributeDefinition xsi:type="Simple" id="adobe_email">
<InputDataConnector ref="ONIDLDAP" attributeNames="eduPersonPrincipalName" />
<AttributeEncoder xsi:type="SAML2String" name="Email" />
</AttributeDefinition>
Was any special configuration needed on Adobe's side to use the standard
OID names?
Thanks,
Andy
More information about the users
mailing list