Shib SP attribute aliases
Paul B. Henson
henson at acm.org
Fri Sep 19 02:06:32 UTC 2025
On 9/18/2025 12:18 PM, Cantor, Scott via users wrote:
> You can't define multiple rules for the same source name.
I had a client with a similar need once; we ended up simply adding a
second attribute extractor definition:
<!-- Map to extract attributes from SAML assertions. -->
<AttributeExtractor type="XML" validate="true"
reloadChanges="false" path="attribute-map.xml"/>
<AttributeExtractor type="XML" validate="true"
reloadChanges="false" path="attribute-map2.xml"/>
The first definition mapped the source attribute to one name, then the
second definition mapped the same source attribute to a different name.
I vaguely recall I tried the transform plug-in and it didn't work. In
this case though the destination attribute value needed to be the same
for both names.
More information about the users
mailing list