<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
We have a vendor who is requiring release of a non-standard
attribute/value pair.<br>
The attribute is uniqueIdentifier. <br>
We have already pointed out to the vendor that the eduPerson
documentation specifically says to avoid using this attribute, but
they told us "It's not possible to make any change to this attribute
mapping."<br>
One option we have is to push back, but at this time, we are going
with option 2: make it work.<br>
<br>
So, I'd like to do this in a way that we can release the attribute
with the least amount of impact to the rest of our infrastructure,
and I don't want this to come back and bite us in the future.<br>
This seems fairly easy to do in our Shibboleth configuration, below,
but I am looking for feedback. <br>
We have the value needed in a different attribute and I want to the
overloading of this attribute to be specific to this vendor.<br>
Will this work and/or is there a better way?<br>
<br>
Thanks,<br>
Dan<br>
<br>
attribute-resolver.xml<br>
<blockquote><tt>...<br>
<resolver:AttributeDefinition xsi:type="ad:Simple"
id="parchmentComStudentID"
sourceAttributeID="calstateEduPersonEmplid"></tt><br>
<tt> <resolver:Dependency ref="myLDAP" /></tt><br>
<tt> <resolver:AttributeEncoder
xsi:type="enc:SAML1String"
name="urn:oid:0.9.2342.19200300.100.1.44" /></tt><br>
<tt> <resolver:AttributeEncoder
xsi:type="enc:SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.44"
friendlyName="uniqueIdentifier" /></tt><br>
<tt> </resolver:AttributeDefinition></tt><br>
<tt>...</tt><br>
</blockquote>
<br>
<br>
<br>
attribute-filter.xml<br>
<blockquote><tt>...<br>
<afp:AttributeFilterPolicy></tt><tt><br>
</tt><tt> <afp:PolicyRequirementRule xsi:type="basic:OR"
></tt><tt><br>
</tt><tt> <basic:Rule
xsi:type="basic:AttributeRequesterString"
value="sso.parchment.com" /></tt><tt><br>
</tt><tt> <basic:Rule
xsi:type="basic:AttributeRequesterString"
value="qa-sso.parchment.com" /></tt><tt><br>
</tt><tt> </afp:PolicyRequirementRule></tt><tt><br>
</tt><tt><br>
</tt><tt> <!-- parchmentCom Attributes --></tt><tt><br>
</tt><tt><br>
</tt><tt> <afp:AttributeRule
attributeID="parchmentComStudentID"></tt><tt><br>
</tt><tt> <afp:PermitValueRule xsi:type="basic:ANY"
/></tt><tt><br>
</tt><tt> </afp:AttributeRule></tt><tt><br>
</tt><tt><br>
</tt><tt> ...</tt><tt><br>
</tt><tt><br>
</tt><tt> </afp:AttributeFilterPolicy></tt><tt><br>
</tt><tt>...<br>
</tt></blockquote>
<br>
<br>
<br>
<pre class="moz-signature" cols="999">--
Dan Malone
<a class="moz-txt-link-abbreviated" href="mailto:dmalone@calpoly.edu">dmalone@calpoly.edu</a>
Cal Poly State University - San Luis Obispo
</pre>
</body>
</html>