Add metadata-driven naming to attribute transcoders

Description

Add support for specifying OIDC claim names via SAML metadata in the same way as IdP 5.1 supports it for SAML attributes: https://shibboleth.atlassian.net/browse/IDP-2057 .

We may duplicate some methods from IdP 5.1’s AbstractAttributeTranscoder for keeping compatibility with IdP 5.0.

Environment

None

Activity

Show:

Henri Mikkonen March 14, 2024 at 8:45 AM

Implemented in 6c2f28d0eb28f4725d8759fc3d1994190c5bb7b9.

If the transcoder property flag oidc.nameFromSamlMetadata is set to true, then the OIDC claim name can be set via SAML metadata tag http://shibboleth.net/ns/attributes/naming/oidc. The logic for the value is <attributeId> <claimName>, for instance mail customEmailName sets customEmailName claim name for the attribute mail.  

The AbstractOIDCAttributeTranscoder contains one variable and two methods copied from IdP 5.1's AbstractAttributeTranscoder for keeping compatibility with IdP 5.0. TODO-tags were added to the source code as a reminder.

The transcoder beans defined in oidc-config module were also updated accordingly.

Done

Details

Assignee

Reporter

Components

Fix versions

Created March 14, 2024 at 7:37 AM
Updated April 11, 2024 at 9:38 AM
Resolved March 19, 2024 at 12:11 PM

Flag notifications