IDP 4.1.5 Nameid

[Mathew, Sunil]

I guess I could use the following: https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration#Dealing-with-Conflicting-Requirements

              <property name="activationCondition">
11                   <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://sp.example.com/shibboleth" />
12            </property>

Sunil


From: users <users-bounces at shibboleth.net> on behalf of Mathew, Sunil via users <users at shibboleth.net>
Date: Friday, March 18, 2022 at 12:58 PM
To: Cantor, Scott <cantor.2 at osu.edu>, Shib Users <users at shibboleth.net>
Cc: Mathew, Sunil <smathew at hbs.edu>
Subject: Re: IDP 4.1.5 Nameid
Thanks Scott.

I followed the example here: http://shibboleth.net/pipermail/users/2021-January/048839.html<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fshibboleth.net%2Fpipermail%2Fusers%2F2021-January%2F048839.html&data=04%7C01%7Csmathew%40hbs.edu%7Cdcdb0dbbd16448d6572908da0900639b%7C09fd564ebf4243218f2db8e482f8635c%7C0%7C0%7C637832194981059785%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FT16I6Rr2b%2F2ArEd%2FEGnHZPRZ%2F1TwovZ6uIhj1inuEA%3D&reserved=0> and I modified saml-nameid.xml to the following:

        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"

            p:omitQualifiers="true"

            p:format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"

            p:attributeSourceIds="#{ {'canvas_name_id'} }" />

and atttibute-resolver.xml to the following:
    <AttributeDefinition xsi:type="PrincipalName" id="canvas_name_id">
        <AttributeEncoder xsi:type="SAML1String" name="canvas_name_id" encodeType="false" />
        <AttributeEncoder xsi:type="SAML2String" name="canvas_name_id" encodeType="false" />
    </AttributeDefinition>

Does that mean if I have to define nameids for each SP, I will have to configure separate SAML2AttributeSourcedGenerator in saml-nameid.xml?

Regards,
Sunil


From: Cantor, Scott <cantor.2 at osu.edu>
Date: Friday, March 18, 2022 at 10:54 AM
To: Shib Users <users at shibboleth.net>
Cc: Mathew, Sunil <smathew at hbs.edu>
Subject: Re: IDP 4.1.5 Nameid
There is no "legacy" feature to document, it was removed, that's why it causes warnings in the later 3.x releases. The documentation on NameID Generation is very prominent in the wiki (that's what it's called). It worked in 3.x largely the same way.

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220318/5710f5dd/attachment.htm>