Change Returned Value for a Service

Peter Schober peter.schober at univie.ac.at
Wed Mar 20 20:05:22 EDT 2019


* Hugo Slavia <hugoslavia101 at gmail.com> [2019-03-21 00:56]:
> Is there a way to swap 'mail' out for 'Email' for this particular service?
> Otherwise flow through as expected for other services which consumes the
> attribute?

Just add another AttributeEncoder to your existing 'mail' attribute
definition and make that specific for the SP in question
with the relyingParties XML attribute:

  <AttributeDefinition id="mail" xsi:type="Simple">
    <InputDataConnector ref="myLDAP" attributeNames="mail" />
        <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />
        <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" />
        <AttributeEncoder xsi:type="SAML2String" name="Email" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
	  encodeType="false" relyingParties="https://www.digicert.com/account/saml-guest-request/metadata" />
  </AttributeDefinition>

I.e., only the third AttributeEncoder is added to an existing
definition. The filter still releases 'mail', same as for any other SP. 

-peter


More information about the users mailing list