Once the AttributeResolver handler is configured, it can for example be queried (e.g. from localhost) with: $ curl -k 'https://localhost/Shibboleth.sso/AttributeResolver?format=urn:oasis:names:tc:SAML:2.0:nameid-format:persistent&entityID=https%3A%2F%2Fyour.idp.example.org%2Fidp%2Fshibboleth&nameId=123456789PfvsH8k4gvHoeq6QtM='
This will return a JSON data structure like:
{
"displayName" : [
"Lukas Hämmerle"
],
"mail" : [
"lukas.haemmerle@switch.ch"
],
"schacHomeOrganization" : [
"switch.ch"
],
"persistent-id" : [
"https://your.idp.example.org/idp/shibboleth!https://test.sp.example.org/shibboleth!1FmaGeMauPfvsH8k4gvHoeq6QtM="
],
"idp" : [
"https://your.idp.example.org /idp/shibboleth"
] }
|