summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristos Kanellopoulos <christos.kanellopoulos@geant.org>2019-10-15 20:36:01 +0300
committerIvan Kanakarakis <ivan.kanak@gmail.com>2019-10-15 20:36:01 +0300
commit25e9dc3b7466572a333a32c03cfc91ef3b9e696f (patch)
tree57a5a3915d0f0624c6fb4066b1c1fe2d7779448f
parent719ec935ee5eb93e5346c95920dbae9db61b4776 (diff)
downloadpysaml2-25e9dc3b7466572a333a32c03cfc91ef3b9e696f.tar.gz
Add attribute mapping for umbrellaID attributes (#648)
umbrellaID is the federated identity system for the users of the (European) large neutron and photon facilities. This commit adds the mapping for the EAAHash and EEAKey, which are used for identifying users in the umbrellaID AAI.
-rw-r--r--src/saml2/attributemaps/saml_uri.py8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/saml2/attributemaps/saml_uri.py b/src/saml2/attributemaps/saml_uri.py
index 608fcc28..9a23cbe0 100644
--- a/src/saml2/attributemaps/saml_uri.py
+++ b/src/saml2/attributemaps/saml_uri.py
@@ -27,6 +27,10 @@ EIDAS_LEGALPERSON = 'http://eidas.europa.eu/attributes/legalperson/'
# https://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/cs01/saml-subject-id-attr-v1.0-cs01.html
SAML_SUBJECT_ID = 'urn:oasis:names:tc:SAML:attribute:'
+# umbrellaID specification - https://www.umbrellaid.org
+# https://github.com/Umbrella-Commiters/UmbrellaIdP3/blob/master/schema/99-user.ldif
+UMBRELLA_EAAUser_ID = 'urn:oid:1.3.6.1.4.1.42750.1.1.'
+
MAP = {
'identifier': 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri',
'fro': {
@@ -143,6 +147,8 @@ MAP = {
UCL_DIR_PILOT+'37': 'associatedDomain',
UCL_DIR_PILOT+'43': 'co',
UCL_DIR_PILOT+'60': 'jpegPhoto',
+ UMBRELLA_EAAUser_ID+'1': 'EAAHash',
+ UMBRELLA_EAAUser_ID+'3': 'EAAKey',
UMICH+'57': 'labeledURI',
X500ATTR_OID+'2': 'knowledgeInformation',
X500ATTR_OID+'3': 'cn',
@@ -231,6 +237,8 @@ MAP = {
'displayName': NETSCAPE_LDAP+'241',
'dmdName': X500ATTR_OID+'54',
'dnQualifier': X500ATTR_OID+'46',
+ 'EAAHash': UMBRELLA_EAAUser_ID+'1',
+ 'EAAKey': UMBRELLA_EAAUser_ID+'3',
'eduCourseMember': EDUCOURSE_OID+'2',
'eduCourseOffering': EDUCOURSE_OID+'1',
'eduPersonAffiliation': EDUPERSON_OID+'1',