General
There are several reasons why a SP could need more attributes than provided in the Entity Categories provided
...
The manual releases are added to the release from the Entity Categories, if any. If the same attribute is released in a Entity Category and also in a manual release the manual release will take over.
How to make a manual attribute releases for SP's
In the /config folder you will find a PowerShell script with the name get-ADFSTkManualSPSettings.ps1.
...
To see how the TransformRule Objects are build up, look at the Import-ADFSTkAllTransformRules.ps1 in the /private folder of the module.
Known SP's that need fixes
General
There are some SP's that we know needs attention to be able to work. Before you add any of them, please make sure they don't work as-is.
The PowerShell code provided for each SP should be copied to the get-ADFSTkManualSPSettings.ps1 script in the /config folder. Please note the additional steps might also be needed.
Terena
### Terena.org/sp
$TransformRules = [Ordered]@{}
$TransformRules.'transient-id' = $AllTransformRules.'transient-id'
$TransformRules.eduPersonTargetedID = $AllTransformRules.eduPersonTargetedID
$TransformRules.eduPersonPrincipalName = $AllTransformRules.eduPersonPrincipalName
$TransformRules.mail = $AllTransformRules.mail
$TransformRules.displayName = $AllTransformRules.displayName
$TransformRules.givenName = $AllTransformRules.givenName
$TransformRules.sn = $AllTransformRules.sn
$TransformRules.eduPersonScopedAffiliation = $AllTransformRules.eduPersonScopedAffiliation
$IssuanceTransformRuleManualSP["https://terena.org/sp"] = $TransformRules
###
Orcid
### orcid.org
$TransformRules = [Ordered]@{}
$TransformRules.eduPersonUniqueID = $AllTransformRules.eduPersonUniqueID
$IssuanceTransformRuleManualSP["https://orcid.org/saml2/sp/1"] = $TransformRules
###
Digicert
### Digicert
$TransformRules = [Ordered]@{}
$TransformRules["eduPersonPrincipalName"] = $AllTransformRules["eduPersonPrincipalName"]
$TransformRules["displayName"] = $AllTransformRules["displayName"]
$TransformRules["mail"] = $AllTransformRules["mail"]
$TransformRules["schacHomeOrganization"] = $AllTransformRules["schacHomeOrganization"]
$TransformRules["eduPersonEntitlement"] = $AllTransformRules["eduPersonEntitlement"]
$IssuanceTransformRuleManualSP["https://www.digicert.com/sso"] = $TransformRules
###
...
- Change the Secure Hash from SHA256 to SHA1
Remove the encryption certificate