Shib SP attribute aliases

Paul B. Henson henson at acm.org
Fri Sep 19 02:06:32 UTC 2025


On 9/18/2025 12:18 PM, Cantor, Scott via users wrote:
> You can't define multiple rules for the same source name.

I had a client with a similar need once; we ended up simply adding a 
second attribute extractor definition:

         <!-- Map to extract attributes from SAML assertions. -->
         <AttributeExtractor type="XML" validate="true" 
reloadChanges="false" path="attribute-map.xml"/>
         <AttributeExtractor type="XML" validate="true" 
reloadChanges="false" path="attribute-map2.xml"/>

The first definition mapped the source attribute to one name, then the 
second definition mapped the same source attribute to a different name.

I vaguely recall I tried the transform plug-in and it didn't work. In 
this case though the destination attribute value needed to be the same 
for both names.


More information about the users mailing list