SwitchCase Identity Assertion Provider
The SwitchCase identity assertion provider solves issues where down stream ecosystem components require user and group principal names to be a specific case.
These are the configuration parameters used to control the behavior of the
provider.
If no parameters are provided the full defaults will results in
both user and group principal names being switched to lower case. A setting of
“none” or anything other than “upper” or “lower” leaves the case of the
principal name unchanged.
Parameter | Description |
---|---|
principal.case | The case mapping of user principal names. Choices are: lower, upper, none. Defaults to lower. |
group.principal.case | The case mapping of group principal names. Choices are: lower, upper, none. Defaults to setting of principal.case. |
An example of how this provider is enabled and configured within the <gateway>
section of a topology file is shown below. This particular example will switch user
principals names to lower case and group principal names to upper
case:
<provider>
<role>identity-assertion</role>
<name>SwitchCase</name>
<param>
<name>principal.case</name>
<value>lower</value>
</param>
<param>
<name>group.principal.case</name>
<value>upper</value>
</param>
<enabled>true</enabled>
</provider>