Skip to content

Commit 1018cbe

Browse files
authored
Updated FredHutchAzureIdp with attribute map
Added additional references to other SAML attributes being made available by FredHutchIdP. Using https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/claims as a reference for "saml_" attribute map short names.
1 parent 807ec0a commit 1018cbe

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

uw_saml2/idp/federated.py

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -106,10 +106,19 @@ class FredHutchAzureIdp(IdpConfig):
106106
acustomed to using ePPN
107107
"""
108108
_azure_tenant_id = '0054a3ea-b394-418b-ad1a-174138231fd6'
109-
_xmlsoap_prefix = 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims'
109+
110110
entity_id = f'https://sts.windows.net/{_azure_tenant_id}/'
111111
sso_url = f'https://login.microsoftonline.com/{_azure_tenant_id}/saml2'
112-
id_attribute = f'{_xmlsoap_prefix}/employeeid'
112+
_attribute_prefix = 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims'
113+
_attribute_prefix2 = 'http://schemas.microsoft.com/identity/claims'
114+
id_attribute = f'{_attribute_prefix}/employeeid'
115+
attribute_map = {
116+
f'{_attribute_prefix}/name': 'saml_unique_name',
117+
f'{_attribute_prefix2}/objectidentifier': 'saml_oid',
118+
f'{_attribute_prefix2}/displayname': 'saml_displayname',
119+
f'{_attribute_prefix2}/authnmethodsreferences':
120+
'saml_authncontextclassref'
121+
}
113122
x509_cert = '''
114123
MIIC8DCCAdigAwIBAgIQGB680XRFNZhCkepWMRYORjANBgkqhkiG9w0BAQsFADA0
115124
MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZp

0 commit comments

Comments
 (0)