* Matthew Slowe <[log in to unmask]> [2011-08-23 14:35]:
> I've been asked to release a different attribute from LDAP as
> eduPersonPrincipalName to a specific SP. Is this possible? Short of
> defining regexps in the attribute release policy to try and guess which
> flavour to release to where, I can't see how :(
You'll need to define a new attribute in your Shibboleth attribute
resolver, attach an attribute encoder that encodes it as eppn
(copy/paste from the original eppn attribute definition) and release
this new attribute specifically to the intended SP via the Shibboleth
attribute filter.
-peter
|