From 00682b11b5f4e711f97e004c19bf1b81e0167cac Mon Sep 17 00:00:00 2001
From: Scott Koranda <skoranda@gmail.com>
Date: Sat, 9 Nov 2019 13:17:01 -0600
Subject: [PATCH] Update Shib SP config to use template attribute resolver

Updated the Shibboleth SP configuration to use the template attribute
resolver to copy ENV_OIS_EPPN to ENV_OIS_SORID.
---
 roles/training/files/shibboleth2.xml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/roles/training/files/shibboleth2.xml b/roles/training/files/shibboleth2.xml
index 5108e2d..abfa90a 100644
--- a/roles/training/files/shibboleth2.xml
+++ b/roles/training/files/shibboleth2.xml
@@ -3,7 +3,12 @@
     xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     clockSkew="180">
 
-    <OutOfProcess tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" />
+    <OutOfProcess tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" >
+        <Extensions>
+            <Library path="plugins.so" />
+        </Extensions>
+    </OutOfProcess>
+    
   
     <ApplicationDefaults entityID="https://registry.comanage.incommon.training/sp/shibboleth"
         REMOTE_USER="ENV_OIS_EPPN"
@@ -39,6 +44,10 @@
 
         <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
 
+        <AttributeResolver type="Template" sources="ENV_OIS_EPPN" dest="ENV_OIS_SORID">
+            <Template>$ENV_OIS_EPPN</Template>
+        </AttributeResolver>
+
         <CredentialResolver type="File" use="signing"
             key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/>
         <CredentialResolver type="File" use="encryption"