Overview
This page gives some examples of how attributes which are asserted by social identity providers (via both OAuth and OpenID) could be mapped to MACE-Dir/SAML attributes.
Examples
Caution
It has not been verified, but the values for eduPersonTargetedID
probably are not valid values for Internet2 eduPersonTargetedID
because they do not appear to be unique for a given person and service, i.e., for most of them, the targeted ID is the same for all services for the same person.
Facebook Mappings
MACE-Dir SAML Attribute |
OAuth Attribute |
Example Value |
Notes |
---|---|---|---|
|
|
Lucas |
|
|
|
Rockwell |
|
|
|
Lucas Rockwell |
See |
|
|
Lucas Rockwell |
Duplicate of |
|
|
lr@lucasrockwell.com |
|
|
|
lucasrockwell |
Can be blank, and a user can change this once for the lifetime of their account. |
|
|
lucasrockwell@facebook.com |
|
|
|
http://facebook.com!12...71 |
|
OpenID (Google) Mappings
MACE-Dir SAML Attribute |
OpenID Attribute |
Example Value |
Notes |
---|---|---|---|
|
|
Lucas |
|
|
|
Rockwell |
|
|
|
|
Google does not provide |
|
|
|
Google does not provide |
|
|
lucasrockwell@gmail.com |
|
|
|
|
Google does not provide |
|
|
lucasrockwell@gmail.com |
Using http://axschema.org/contact/email for |
|
|
|
|
LinkedIn Mappings
MACE-Dir SAML Attribute |
OpenID Attribute |
Example Value |
Notes |
---|---|---|---|
|
|
Lucas |
|
|
|
Rockwell |
|
|
|
|
LinkedIn does not provide |
|
|
|
LinkedIn does not provide |
|
|
|
LinkedIn does not provide |
|
|
Y...r |
|
|
|
Y...r@linkedin.com |
Local part is the same value as |
|
|
http://linkedin.com!Y...r |
Unique value is the same value as |
Twitter Mappings
MACE-Dir SAML Attribute |
OpenID Attribute |
Example Value |
Notes |
---|---|---|---|
|
|
|
Twitter does not provide |
|
|
|
Twitter does not provide |
|
|
Lucas Rockwell |
|
|
|
Lucas Rockwell |
|
|
|
|
Twitter does not provide |
|
|
lucasrockwell |
|
|
|
lucasrockwell@twitter.com |
|
|
|
http://twitter.com!1...5 |
|
Windows Live Mappings
MACE-Dir SAML Attribute |
OpenID Attribute |
Example Value |
Notes |
---|---|---|---|
|
|
Lucas |
|
|
|
Rockwell |
|
|
|
|
Windows Live does not provide |
|
|
|
Windows Live does not provide |
|
|
lr@lucasrockwell.com |
This is not necessarily an address @hotmail.com. |
|
|
fd...89 |
|
|
|
fd...89@windowslive.com |
Local part is the same value as |
|
|
http://windowslive.com!fd...89 |
Unique value is the same value as |