Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

In the most unusual cases, V4.1 + adds support for injecting a custom object of your own creation that implements the NameIDDecoder interface to fully customize the decoding process. The bean name shibboleth.SAML2ProxyTransform.NameIDDecoder is reserved for this purpose.

Reference

true
Localtabgroupexpand
Localtab live
titleProperties (V4.1+)

Properties related to this feature in conf/c14n/subject-c14n.properties follow:

Name

Type

Default

Description

idp.c14n.saml.proxy.lowercase

Boolean

false

Whether to lowercase the incoming NameID value prior to applying any transforms

idp.c14n.saml.proxy.uppercase

Boolean

false

Whether to upcase the incoming NameID value prior to applying any transforms

Localtab live
active
Expand
titleBeans

The beans related to this feature in conf/c14n/subject-c14n.xml follow:

Bean ID

Type

Description

shibboleth.ProxyNameTransformFormats                        

List<String>

List of NameID Format values to run the flow against

shibboleth.ProxyNameTransformPredicate

Predicate<ProfileRequestContext>

Activation condition for flow

shibboleth.ProxyNameTransforms

List<String,String>

List of regular expression and replacement string pairs to apply to the NameID value

shibboleth.SAML2ProxyTransform.NameIDDecoder 4.1

NameIDDecoder

Custom decoder to use to implement the "c14n/SAML2ProxyTransform" flow's behavior