Change Returned Value for a Service
Peter Schober
peter.schober at univie.ac.at
Wed Mar 20 20:05:22 EDT 2019
* Hugo Slavia <hugoslavia101 at gmail.com> [2019-03-21 00:56]:
> Is there a way to swap 'mail' out for 'Email' for this particular service?
> Otherwise flow through as expected for other services which consumes the
> attribute?
Just add another AttributeEncoder to your existing 'mail' attribute
definition and make that specific for the SP in question
with the relyingParties XML attribute:
<AttributeDefinition id="mail" xsi:type="Simple">
<InputDataConnector ref="myLDAP" attributeNames="mail" />
<AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String" name="Email" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
encodeType="false" relyingParties="https://www.digicert.com/account/saml-guest-request/metadata" />
</AttributeDefinition>
I.e., only the third AttributeEncoder is added to an existing
definition. The filter still releases 'mail', same as for any other SP.
-peter
More information about the users
mailing list