GluuFederation/oxShibboleth

Review attribute translater integration

Closed this issue · 0 comments

yurem commented

IDP ignores all attributes which we put into principal except UsernamePrincipal.

In 4.2 we added to IDP script same code to allow to customize hardcoded translation (lines 58-71). Block in line 73 (disabled) do the same via contexts. But in both cases IDP ignores principals. It looks like that IDP uses attributes which it gets from DB only.

I think we can extend the existing attribute resolver to append additional attributes which we get during translation. Or we can review our integration to conform to IDP 4.0. I think the integration based on servlets will stop working in IDP 5. And we need to update our code beforehand.