saml-nameid.xml activation condition based on NameID format?
Paul B. Henson
henson at cpp.edu
Fri Sep 11 01:17:13 UTC 2020
I'd like to control the activation of the
shibboleth.SAML2AttributeSourcedGenerator for the
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress format based on
that format having been requested by the SP (either in it's actual
metadata or overriden by an EntityAttributes filter), along with a
qualifier for SP's that say they want "email address" but actually want
some other random crap.
The second condition I was going to base on an entity attribute tag and
the EntityAttributesPredicate bean. Is there anyway to
check what nameid format is being used for a transaction either via a
predicate bean or script? Effectively, something like:
if NameIDFormat ==
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress and (not
EntityAttributesPredicate(name=crappy_sp, values=true))
Thanks...
--
Paul B. Henson | (909) 979-6361 | http://www.cpp.edu/~henson/
Operating Systems and Network Analyst | henson at cpp.edu
California State Polytechnic University | Pomona CA 91768
More information about the users
mailing list