<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi <br>
</p>
<p>I need to send different nameIDs for different SPs.</p>
<p>It works fine for one candidate , here/below with o365 and
imutableID for candites in Microsoft federation [1] <br>
</p>
<p>but how can I add an other AttributeSourceID for other candidates
? <br>
</p>
<p>I tried to add a second <i><font size="2"><bean
parent="shibboleth.SAML2AttributeSourcedGenerator</font></i></p>
<p>but It isn't selected when I connected the SPs in the 2nd
activationCondition list [2] . <br>
</p>
<p>I think I don't understand how to cumulates both conditions
(different source attributes for different SPs) <br>
</p>
<p>should the condition be declared in one unique bean <i><font
size="1">shibboleth.SAML2AttributeSourcedGenerator</font></i>
? how ? <i><font size="1"><br>
</font></i></p>
<p>I read refernces :<i><font size="1"> </font></i>perhaps I
missed something ...<i><font size="1"><br>
</font></i></p>
<p><i><font size="1"><a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631713/ActivationConditions">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631713/ActivationConditions</a>
<br>
</font></i></p>
<p><i><font size="1"><a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631671/NameIDGenerationConfiguration">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631671/NameIDGenerationConfiguration</a><br>
</font></i></p>
<p><br>
</p>
<p><i><font size="1">[1] <br>
</font></i></p>
<p><i><font size="1"> <!-- SAML 2 NameID Generation --><br>
<util:list id="shibboleth.SAML2NameIDGenerators"><br>
<br>
<ref bean="shibboleth.SAML2TransientGenerator"
/><br>
<!-- Persistent ID Generator for all entities
except Microsoft --><br>
<bean parent="shibboleth.SAML2PersistentGenerator"><br>
<property name="activationCondition"><br>
<bean parent="shibboleth.Conditions.NOT"><br>
<constructor-arg><br>
<bean
parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{'urn:federation:MicrosoftOnline'}}" /><br>
</constructor-arg><br>
</bean><br>
</property><br>
</bean><br>
<br>
<!-- Microsoft requires a custom Persistent ID
Generator that sends the AD GUID --><br>
<bean
parent="shibboleth.SAML2AttributeSourcedGenerator"<br>
p:format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"<br>
p:attributeSourceIds="#{ {'ImmutableID'}
}"><br>
<property name="activationCondition"><br>
<bean
parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{'urn:federation:MicrosoftOnline'}}" /><br>
</property><br>
</bean><br>
</font></i></p>
<p><br>
</p>
<p>2nd SAML2AttributeSourcedGenerator for specific source Attribute
+ SPs<i><font size="1"><br>
</font></i></p>
<p><i><font size="1">[2] <br>
<!-- SAML 2 sifi-recette OP 9.3 jehan --><br>
<bean
parent="shibboleth.SAML2AttributeSourcedGenerator"<br>
p:omitQualifiers="true"<br>
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"<br>
p:attributeSourceIds="#{ {'uid', 'mail'} }"><br>
<property name="activationCondition"><br>
<bean
parent="shibboleth.Conditions.RelyingPartyId" ><br>
<constructor-arg name="candidates"><br>
<list><br>
<value><a class="moz-txt-link-freetext" href="https://sp2.domain.fr/shibboleth">https://sp2.domain.fr/shibboleth</a></value><br>
<value><a class="moz-txt-link-freetext" href="https://sp3.dom.eu/shibboleth">https://sp3.dom.eu/shibboleth</a></value><br>
</list><br>
</constructor-arg><br>
</bean><br>
</property><br>
</bean><br>
</util:list></font></i><br>
<br>
<br>
<br>
<br>
</p>
</body>
</html>