IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Extended
attributes
in
the
token
that
do
not
match
an
entry
in
[cdsso-incoming-attributes]
are
preserved
(extracted).
The
order
of
the
entries
in
the
stanza
is
important.
The
first
entry
that
matches
an
attribute
name
is
used.
Other
entries
are
ignored.
For
example,
if
you
want
to
extract
the
attribute
named
my_special_attr1
but
want
to
ignore
all
other
entries
with
the
prefix
my_special_attr_,
the
stanza
entries
should
be:
[cdsso-incoming-attributes]
my_special_attr1
=
preserve
my_special_attr_*
=
refresh
Using
the
examples
shown
above
in
“Specify
extended
attributes
to
add
to
token”
on
page
253,
the
entries
in
the
WebSEAL
configuration
file
for
a
server
that
operates
in
the
example2.com
domain
could
be:
[cdsso-incoming-attributes]
job_category
=
preserve
my_cdas_attr_1
=
preserve
my_cdas_attr_*
=
refresh
In
this
example,
the
attributes
job_category
and
my_cdas_attr_1
are
extracted
from
the
token.
The
remainder
of
the
attributes
with
the
prefix
my_cdas_attr_
are
ignored.
Chapter
9.
Client
single
sign-on
solutions
255