PersistentNameID2TargetedID.php

Go to the documentation of this file.

<?php


class sspmod_saml_Auth_Process_PersistentNameID2TargetedID extends SimpleSAML_Auth_ProcessingFilter
{

    private $attribute;


    private $nameId;


    public function __construct($config, $reserved)
    {
        parent::__construct($config, $reserved);
        assert(is_array($config));

        if (isset($config['attribute'])) {
            $this->attribute = (string) $config['attribute'];
        } else {
            $this->attribute = 'eduPersonTargetedID';
        }

        if (isset($config['nameId'])) {
            $this->nameId = (bool) $config['nameId'];
        } else {
            $this->nameId = true;
        }
    }


    public function process(&$state)
    {
        assert(is_array($state));

        if (!isset($state['saml:NameID'][\SAML2\Constants::NAMEID_PERSISTENT])) {
            SimpleSAML\Logger::warning(
                'Unable to generate eduPersonTargetedID because no persistent NameID was available.'
            );
            return;
        }

        $nameID = $state['saml:NameID'][\SAML2\Constants::NAMEID_PERSISTENT];

        $state['Attributes'][$this->attribute] = array((!$this->nameId) ? $nameID->value : $nameID);
    }
}