alternate attributeSourceIDs for a given nameid format

Cantor, Scott cantor.2 at osu.edu
Wed Mar 10 19:06:20 UTC 2021


On 3/10/21, 1:03 PM, "users on behalf of Baron Fujimoto" <users-bounces at shibboleth.net on behalf of baron at hawaii.edu> wrote:

>    I'm afraid my grasp of IdP-initiated SPs is poor and I don't yet have an inkling how we might begin to
> implement these possibilities without more explicit documentation or examples.

That's the benefit of membership, to be brutally frank.

>    Getting back to the original suggestion by Gary Lipscomb, may we can kludge that after all, assuming we can
> have multiple SAML2AttributeSourcedGenerator beans in saml-nameid.xml that use result in the same nameid
> format, but use different attributeSourceID. If so, would these beans be order dependent on a first match basis
> (like metadata?). Ie. something like this?

Yes, that is probably the best fix for this issue, just release the unusual source attribute to just that SP and then it won't ever run successfully for any other, generators just fall through if they have nothing to operate on.

-- Scott




More information about the users mailing list