Send basic attribute format

Author: mrvanes

roles/midproxy/files/plugins/attribute-maps/basic.py

@@ -0,0 +1,51 @@
+DEF = "urn:mace:dir:attribute-def:"
+TERENA = "urn:mace:terena.org:attribute-def:"
+
+MAP = {
+    "identifier": "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
+    "fro": {
+        f"{TERENA}schacHomeOrganization": "schacHomeOrganization",
+        f"{DEF}cn": "cn",
+        f"{DEF}displayName": "displayName",
+        f"{DEF}eduPersonAffiliation": "eduPersonAffiliation",
+        f"{DEF}eduPersonEntitlement": "eduPersonEntitlement",
+        f"{DEF}eduPersonPrincipalName": "eduPersonPrincipalName",
+        f"{DEF}eduPersonScopedAffiliation": "eduPersonScopedAffiliation",
+        f"{DEF}eduPersonTargetedID": "eduPersonTargetedID",
+        f"{DEF}eduPersonAssurance": "eduPersonAssurance",
+        f"{DEF}email": "email",
+        f"{DEF}emailAddress": "emailAddress",
+        f"{DEF}givenName": "givenName",
+        f"{DEF}gn": "gn",
+        f"{DEF}isMemberOf": "isMemberOf",
+        f"{DEF}mail": "mail",
+        f"{DEF}member": "member",
+        f"{DEF}name": "name",
+        f"{DEF}sn": "sn",
+        f"{DEF}surname": "surname",
+        f"{DEF}uid": "uid",
+    },
+    "to": {
+        "schacHomeOrganization": f"{TERENA}schacHomeOrganization",
+        "cn": f"{DEF}cn",
+        "displayName": f"{DEF}displayName",
+        "eduPersonAffiliation": f"{DEF}eduPersonAffiliation",
+        "eduPersonEntitlement": f"{DEF}eduPersonEntitlement",
+        "eduPersonPrincipalName": f"{DEF}eduPersonPrincipalName",
+        "eduPersonScopedAffiliation": f"{DEF}eduPersonScopedAffiliation",
+        "eduPersonTargetedID": f"{DEF}eduPersonTargetedID",
+        "eduPersonAssurance": f"{DEF}eduPersonAssurance",
+        "eduPersonOrcid": f"{DEF}eduPersonOrcid",
+        "email": f"{DEF}email",
+        "emailAddress": f"{DEF}emailAddress",
+        "givenName": f"{DEF}givenName",
+        "gn": f"{DEF}gn",
+        "isMemberOf": f"{DEF}isMemberOf",
+        "mail": f"{DEF}mail",
+        "member": f"{DEF}member",
+        "name": f"{DEF}name",
+        "sn": f"{DEF}sn",
+        "surname": f"{DEF}surname",
+        "uid": f"{DEF}uid",
+    },
+}

roles/midproxy/files/plugins/frontends/saml2_frontend.yaml

@@ -36,7 +36,7 @@ config:
       local: [!ENV SATOSA_SP_METADATA]
     entityid: <base_url>/<name>/proxy.xml
     accepted_time_diff: 60
-    # attribute_map_dir: plugins/attribute-maps
+    attribute_map_dir: plugins/attribute-maps
     service:
       idp:
         endpoints:
@@ -56,8 +56,8 @@ config:
         policy:
           default:
             fail_on_missing_requested: false
-            # name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:basic
-            # attribute_restrictions: null
-            # lifetime: {minutes: 15}
-            # encrypt_assertion: false
-            # encrypted_advice_attributes: false
+            name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:basic
+            attribute_restrictions: null
+            lifetime: {minutes: 15}
+            encrypt_assertion: false
+            encrypted_advice_attributes: false