authproc_subjectid.md

subjectidattrs:SubjectID

Filter to insert a subject-id that complies with the SAML V2.0 Subject Identifier Attributes Profile.

This filter will take an attribute and a scope as input and transforms this into a scoped identifier that is globally unique for a given user.

Note:

If privacy is of your concern, you may want to use the PairwiseID-filter instead.

Note: Since the subject-id is specified as single-value attribute, only the first value of identifyingAttribute and scopeAttribute are considered.

Examples

    'authproc' => [
        50 => [
            'class' => 'subjectidattrs:SubjectID',
            'identifyingAttribute' => 'uid',
            'scopeAttribute' => 'scope',
        ],
    ],