Attribute map sensitive to issuer

Peter Schober peter.schober at univie.ac.at
Sat Jul 24 14:20:14 UTC 2021


* Peter Schober <peter.schober at univie.ac.at> [2021-07-24 16:14]:
> * Ian Hardy <ian at indexdata.com> [2021-07-23 21:16]:
> > So for example, If I'm looking for a first name, and have idpA which
> > releases "givenName" and idpB which releases "institutionPreferredName" as
> > well as "givenName". Can I chose to map idbB's "institutionPreferredName"
> > only when the issuer is idpB?
> 
> Wouldn't it be easier to map all kinds of wire representations for
> "first name" to the same internal attribute?

In your example above both IDP A and IDP B are sending "givenName".
So simply ignoring "institutionPreferredName" and always using
"givenName" would be the obvious way to deal with this, no?
Or was just a bad example?

If the issue with mapping multiple wire formats to the same internal
attribute is duplicate values (coming from both
institutionPreferredName and givenName, in your example) the SP has a
feature to deduplicate values, IIRC.

-peter


More information about the users mailing list