oidc

[Morgan, Andrew Jason]

Correct.  The most likely cause of your earlier problem is that you defined 2 attributes with the same id="mail".  If you had created the OIDC attribute with id="oidc_mail", it should have worked.  However, it is clearer to just add the OIDC encoder to the existing attribute definition.

Andy Morgan
Identity & Access Management
Oregon State University

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Kicic Sakib <Sakib.Kicic at smhi.se>
Sent: Monday, January 20, 2020 12:33 AM
To: Shib Users <users at shibboleth.net>
Subject: SV: oidc


Is solved it.

Just added oidc attributeEncoder on already existing attribute:



<AttributeDefinition xsi:type="Simple" id="mail" >

    <InputDataConnector ref="myLDAP" attributeNames="mail" />

    <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />

    <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" />

    <AttributeEncoder xsi:type="oidcext:OIDCString" name="mail " />

  </AttributeDefinition>





Från: users [mailto:users-bounces at shibboleth.net] För Kicic Sakib
Skickat: den 20 januari 2020 09:02
Till: Shib Users
Ämne: SV: oidc





Hi,



If I already have defined SAML attribute “mail” why do I cannot also have OIDC attribute “mail” in attribute-resolver?

How do I get “mail” attribute in oidc access token? This bellow does not work to get mail in access token.



Mail attribute for oidc:

<AttributeDefinition xsi:type="Simple" id="mail" >

        <InputDataConnector ref="myLDAP" attributeNames="mail" />

        <AttributeEncoder xsi:type="oidcext:OIDCString"  name="mail" />

    </AttributeDefinition>



Mail attribute for saml:

<AttributeDefinition xsi:type="Simple" id="mail" >

    <InputDataConnector ref="myLDAP" attributeNames="mail" />

    <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" />

    <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" />

  </AttributeDefinition>




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200120/98aefa5b/attachment.html>