...
You can override the SAML to HTTP header mapping in the Service Provider by modifying the aap.xml file on your server.
AAP.xml Usage
This is the usage of this attribute in the AAP.xml file. For more information about AAP configuration please visit AAP Configuration.
...
<AttributeRule Name="urn:mace:dir:attribute-def:eduPersonTargetedID" Scoped="true" Header="SHIBTARGETEDID" Alias="targeted_id">
<AnySite>
<AnyValue/>
</AnySite>
</AttributeRule>
Remark
At UCLA, eduPersonTargetedID is a calculated value generated on the fly within the Shibboleth Identity Provider. UCLA's Identity Provider generates a different eduPersonTargetedID for each service provider per user.
...
The Official eduPerson Object Class Definition
Usage
This is the usage of this attribute in the AAPattribute-map.xml file. For more information about AAP configuration please visit AAP ConfigurationMapping the attribute please visit Shibboleth wiki.
Code Block | ||||
---|---|---|---|---|
| ||||
<AttributeRule Name <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" Scoped="true" Header="SHIBTARGETEDID" Alias="targeted_id"> <AnySite> <AnyValue/> </AnySite> oid:1.3.6.1.4.1.5923.1.1.1.10" id="SHIBEDUPERSONTARGETEDID"> <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$Name"/> </AttributeRule> Attribute> |