[Unity-idm-discuss] Output translation of email attribute

[D B. <ba...@aw...>]

Hi,

my Unity entities have an "email" attribute, which I'd like to send
along in SAML Assertions to my SP (which authenticates against Unity).

To do this, I've created an output translation profile which contains
this rule:

Condition: attr contains 'email'
Action: createAttribute
Action parameters: attributeName = urn:mace:dir:attribute-def:mail
expression = attr['email']
mandatory = false
attributeDisplayName = urn:mace:dir:attribute-def:mail
attributeDescription = email


This makes Unity send the following in the
urn:mace:dir:attribute-def:mail attribute:
{"value":"fo...@ba...","confirmationData":{"[...]

How can I change the MVEL expression of the rule to _only_ send the
value fo...@ba...? I've tried all combinations of attr['email'].value,
attr.email.value, etc, I could think of - but no success.

Is there a way to get at only the email string?

Cheers,
D.