Pick attributes depending on the proxy

[Ward Poelmans]

Hi,

My situation is that I have Shibboleth acting as a proxy for 2 AAD tenants. So far it works using a discovery service in between.

The issue is that I need to deliver a uid attribute to the SP but the value of this field has a different source attribute in the two AAD tenants.

For the first one I need to use the 'OnPremSamAccName' field, for the second the 'AzureName'. I'm struggling how to get this done without fully blown scripting (if that is avoidable). I found the relyingParties properties for attribute definition but it does not seem to do what I hoped: specify the entityID of one of the AAD tenant I'm proxying too doesn't trigger it. What exactly is the relyingParty in this context?

Is there any way of doing this other then using a ScriptedAttribute?

Thanks,


Ward