Change Returned Value for a Service

Hugo Slavia hugoslavia101 at gmail.com
Wed Mar 20 19:55:13 EDT 2019


This is an odd one.

There is a relatively untrusted service - which requires the 'Email'
attribute returned -- however, we wish not to return the actual email
address for this particular service (it will be a scope value of the
persistent ID).

Is there a way to swap 'mail' out for 'Email' for this particular service?
Otherwise flow through as expected for other services which consumes the
attribute?

<resolver:AttributeDefinition id="Email" xsi:type="Simple" xmlns=
"urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="mail">

        <resolver:Dependency ref="mail" />

        <resolver:DisplayName xml:lang="en">Email Address</
resolver:DisplayName>

        <resolver:DisplayDescription xml:lang="en">Email Address</
resolver:DisplayDescription>

             <resolver:AttributeEncoder xsi:type="enc:SAML2String"

             nameFormat=
"urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"

             name="Email"

             encodeType="false" />

     </resolver:AttributeDefinition>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190320/a464a16f/attachment.html>


More information about the users mailing list