Shib 2 release attribute to SP with a different name

Andrew Morgan morgan at orst.edu
Thu Feb 28 13:43:34 EST 2019


On Thu, 28 Feb 2019, Cantor, Scott wrote:

> On 2/28/19, 1:38 PM, "users on behalf of Emily Heiner" <users-bounces at shibboleth.net on behalf of eheiner at whatcom.edu> wrote:
>
>> I don't want the formal attribute name though, I want it to be named Email when it comes across. I'm guessing what
>> you found will pass it as Email instead of the formal "mail" attribute name as specified by the OID. All of this stems
>> from Adobe's SP that we're trying to integrate with, which requires the email address to be sent as "Email" rather
>> than "mail".
>
> That is NOT true. They do not require a non-standard name.

Maybe it is just Adobe's docs then?  We have the following (working) with 
Adobe:

     <!-- Adobe attributes -->
     <AttributeDefinition xsi:type="Simple" id="adobe_firstname">
         <InputDataConnector ref="ONIDLDAP" attributeNames="givenName" />
         <AttributeEncoder xsi:type="SAML2String" name="FirstName" />
     </AttributeDefinition>

     <AttributeDefinition xsi:type="Simple" id="adobe_lastname">
         <InputDataConnector ref="ONIDLDAP" attributeNames="sn" />
         <AttributeEncoder xsi:type="SAML2String" name="LastName" />
     </AttributeDefinition>

     <AttributeDefinition xsi:type="Simple" id="adobe_email">
         <InputDataConnector ref="ONIDLDAP" attributeNames="eduPersonPrincipalName" />
         <AttributeEncoder xsi:type="SAML2String" name="Email" />
     </AttributeDefinition>

Was any special configuration needed on Adobe's side to use the standard 
OID names?

Thanks,
 	Andy


More information about the users mailing list