collabPersonId attribute step 1 - Githubissues

OpenConext / OpenConext-oidcng

OpenID Connect gateway - The Next Generation

3 stars 5 forks source link

collabPersonId attribute step 1 #173

Closed phavekes closed 1 month ago

phavekes commented 1 month ago

This issue is imported from pivotal - Originaly created at Feb 1, 2022 by Thijs Kinkhorst

When EB sends the attribute urn:mace:surf.nl:attribute-def:internal-collabPersonId:

Use this attribute\'s value as the person\'s identifier OIDCNG uses internally.
Use the supplied NameID as the sub
Do not do anything with epTID, whether present or not

Otherwise, when the attribute is not set:

Keep current behaviour = Use NameID as person\'s identifier ,Use epTID as value for sub,

Background: https://wiki.surfnet.nl/pages/editpage.action?pageId=48563257