OIDC sub claim missing from attribute registry

Wessel, Keith kwessel at illinois.edu
Tue Mar 22 19:45:10 UTC 2022


Hey, all,

I've started removing attribute encoders from my attribute-resolver.xml to make the shift to the attribute registry, planning to later come back and replace any simple attribute definitions that are straight through with entries in the exportAttributes attribute of the data connectors.

I hit an issue right off, though. The first one in my attribute resolver config is the data connector for the OIDC sub claim. I notice that there's no entry for the sub claim in the oidc-claim-rules.xml attribute registry file. And, in conf/example/oidc-attribute-resolver.xml, there's an encoder for the sub claim. Is there a reason that the sub claim's encoding is still defined in the attribute resolver?

Because the subject attribute definition needs an activation condition to work properly, I don't plan to get rid of the definition, but I would like to move the encoding if there's not a reason I shouldn't.

Thanks,
Keith



More information about the users mailing list