Shib 2 release attribute to SP with a different name

[Emily Heiner]

According to https://helpx.adobe.com/enterprise/kb/configure-shibboleth-with-adobe-sso.html they want the name as Email, LastName, and FirstName. The shib3 config that they want people to add (which I have to translate to shib2 format) is:
<resolver:AttributeDefinition id="Email" xsi:type="ad:Simple" sourceAttributeID="mail">
    <resolver:Dependency ref="myLDAP" />
    <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />
    <resolver:AttributeEncoder xsi:type="enc:SAML2String" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" name="Email" encodeType="false" />
</resolver:AttributeDefinition>
 
<resolver:AttributeDefinition id="LastName" xsi:type="ad:Simple" sourceAttributeID="sn">
    <resolver:Dependency ref="myLDAP" />
    <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:sn" encodeType="false" />
    <resolver:AttributeEncoder xsi:type="enc:SAML2String" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" name="LastName" encodeType="false" />
</resolver:AttributeDefinition>
 
<resolver:AttributeDefinition id="FirstName" xsi:type="ad:Simple" sourceAttributeID="givenName">
    <resolver:Dependency ref="myLDAP" />
    <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:givenName" encodeType="false" />
    <resolver:AttributeEncoder xsi:type="enc:SAML2String" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" name="FirstName" encodeType="false" />
</resolver:AttributeDefinition>

Emily Heiner
Software Developer/DBA
Whatcom Community College
Email:   eheiner at whatcom.edu
Office:  360-383-3425

"There are known knowns; there are things we know that we know. There are known unknowns; that is to say, there are things that we now know we don't know. But there are also unknown unknowns -- there are things we do not know we don't know."
-- United States Secretary of Defense, Donald Rumsfeld

"I just the other day got. an Internet sent by my staff at 10 o'clock in the morning on Friday. I got it yesterday. Why? Because it got tangled up with all these things going on the Internet commercially [...] And again, the Internet is not something that you just dump something on. It's not a big truck. It's a series of tubes."
-- United States Senator, Ted Stevens


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Thursday, February 28, 2019 10:40 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Shib 2 release attribute to SP with a different name

On 2/28/19, 1:38 PM, "users on behalf of Emily Heiner" <users-bounces at shibboleth.net on behalf of eheiner at whatcom.edu> wrote:

> I don't want the formal attribute name though, I want it to be named 
> Email when it comes across. I'm guessing what you found will pass it 
> as Email instead of the formal "mail" attribute name as specified by 
> the OID. All of this stems from Adobe's SP that we're trying to integrate with, which requires the email address to be sent as "Email" rather than "mail".

That is NOT true. They do not require a non-standard name.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net