How to release custom attribute with Identity Provider 4 version

[IAM David Bantz]

I think you will need to configure more than the attribute resolver, alas.
I'm sure there are more elegant and/or scalable methods, but essentially:

You do need to (1) resolve the attribute that will be used as the value of
the NameID in attribute-resolver.xml, and (2) make that attribute available
to release to the service in question (e.g., by adding an explicit
attribute release policy in attribute-filter.xml or by relying on other
general policies that will result in its release to the service). (3) To
ensure the "right" attribute is used to create the nameID, you may need an
override in relying-party.xml, and to to use a specific nameID format in
the assertion (4) specify format precedence in saml-nameid.xml

A caveat: a nameID format of
urn:oasis:names:tc:SAML:2.0:attribute-format:uri is used for attributes and
not standard for nameID - I don't think I've ever seen it used that way and
don't know if will be allowed.

On Mon, Jul 15, 2024 at 6:18 AM Kannan, Satheesh (ELS-CON) via users <
users at shibboleth.net> wrote:

> Hi,
>
>
>
> How to release customized SAML attribute with Name format -
> urn:oasis:names:tc:SAML:2.0:attrname-format:uri.
>
> May I know the config changes required in attribute-resolver.xml file.
>
>
>
> Regards,
>
> Satheesh
>
> ------------------------------
>
> Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The
> Netherlands, Registration No. 33158992, Registered in The Netherlands.
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240715/5017f794/attachment.htm>