[Satosa-dev] microservice for primary identifier

14 juli 2017 kl. 18:05 skrev Scott Koranda <skoranda at gmail.com>: Hi, Is there a place yet for contributed microservices?

I ask because I have written a microservice I am calling "PrimaryIdentifier" for the NIAID use case. An example configuration might look like this: module: primary_identifier.PrimaryIdentifier name: PrimaryIdentifier config: idp_identifiers: - epuid - - eppn - name_id: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent - - eppn - edupersontargetedid - eppn - - name_id: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent - issuer - - edupersontargetedid - issuer clear_input_attributes: no primary_identifier: uid on_error: https://registration.scienceforum.sc/registry/collaboration_error/co_collab… With this configuration the microservice will examine the attributes asserted by a campus/organization IdP and look in the following order for a value to use as the primary identifier: 1) eduPersonUniqueId 2) eduPersonPrincipalName and SAML2 persistent NameID, in case the IdP is signaling it reassigns eduPersonPrincipalName 3) eduPersonPrincipalName and eduPersonTargetedId, in case the IdP is signaling it reassigns eduPersonPrincipalName 4) eduPersonPrincipalName 5) SAML2 persistent NameID 6) eduPersonTargetedId The special identifier 'issuer' signals that any value found is to be "scoped" with the entityID of the IdP. When it finds the first value it can use from that search order it then asserts that value as 'uid' to the SP. If no value is found after the configured search order then since 'on_error' is set it will redirect the browser to an "error" service to handle that error. Right now we are planning on using a custom COmanage Registry plugin to "catch" the error and display instructions to the user. I am wondering if any other project might have use for the microservice? Any other thoughts? Thanks, Scott K _______________________________________________ Satosa-dev mailing list Satosa-dev at lists.sunet.se https://lists.sunet.se/listinfo/satosa-dev