Customize an OpenSSO IDPAttributeMapper For Once
To implement a federated solution where the consumer of a service can select which attribute is sent from the identity provider to the service provider as an assertion write a custom IDPAttributeMapper . The getAttributes() method takes the OpenSSO SSOToken as one of its parameters. From this, you can determine who the end user is, pull the correct attributes for that user and return the values as an attribute list. The identity provider will take the attributes and send them to the service provider as part of a SAMLv2 assertion.
Posted at 08:33AM Jan 27, 2009 by Michael Teger in Sun | Comments[2]

how about a real example, doc?
Posted by horto on January 30, 2009 at 12:34 PM PST #
Ask and you shall receive (after my return from a short vacay). This is the default implementation.
https://opensso.dev.java.net/source/browse/opensso/products/federation/library/source/com/sun/identity/saml2/plugins/DefaultLibraryIDPAttributeMapper.java?rev=1.2&view=log
Posted by DocTeger on February 05, 2009 at 08:58 AM PST #