SV: oidc

Kicic Sakib Sakib.Kicic at smhi.se
Mon Jan 20 03:01:57 EST 2020


Hi,

If I already have defined SAML attribute “mail” why do I cannot also have OIDC attribute “mail” in attribute-resolver?
How do I get “mail” attribute in oidc access token? This bellow does not work to get mail in access token.

Mail attribute for oidc:
<AttributeDefinition xsi:type="Simple" id="mail" >
        <InputDataConnector ref="myLDAP" attributeNames="mail" />
        <AttributeEncoder xsi:type="oidcext:OIDCString"  name="mail" />
    </AttributeDefinition>

Mail attribute for saml:
<AttributeDefinition xsi:type="Simple" id="mail" >
    <InputDataConnector ref="myLDAP" attributeNames="mail" />
    <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />
    <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" />
  </AttributeDefinition>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200120/b11d2ad4/attachment.html>


More information about the users mailing list