Duplicate attribute releases

Arron Merrill arron.merrill at york.ac.uk
Tue Jul 26 15:24:03 UTC 2022


Hello all,

I am currently trying to set up an integration with a SP that requires
attributes to be released to it under certain saml2 names, namely mail as
'email'.

I have the following defined in a custom-rules.xml file:

    <bean parent="shibboleth.TranscodingProperties">
      <property name="properties">
        <props merge="true">
          <prop key="id">mail</prop>
          <prop key="transcoder">SAML2StringTranscoder</prop>
          <prop key="saml2.name">email</prop>
          <prop key="relyingParties">https://SPsEntityID
<https://spsentityid/></prop>
        </props>
      </property>
    </bean>

When I run the resolver test for saml2, I can see that both our default
'mail' attribute (pulled from inetOrgPerson.xml) and the custom 'mail named
as email' (from custom-rules.xml) are being released.

Is there a way to avoid this duplication when specifically transcoding
attributes for SPs who require certain names?

Thank you for any feedback,

Arron

-- 
Arron Merrill - Identity Systems
IT Services, University of York
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220726/ed220fd5/attachment.htm>


More information about the users mailing list