REMOTE_USER definition question

[Kevin P. Foote]

Just to add a bit to what Nate said earlier. 


-> Why would uid come through if I do not have that variable specified in
-> REMOTE_USER?  

If you attribute-map.xml file still shows the correct OID mapping of the
attribute your friendly name can be foobaz :-) So they are sending as
sysID and you are mapping to uid.

 <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid" />

-> I am confused at the relationship between what is defined in REMOTE_USER and
-> what is received.  

Your SP can receive any number of attributes from an IdP .. your
attribute-map.xml file tells the SP what to keep and what to throw away
as noise. If the attribute "name" is defined in the map file then it will
get translated, if not the attribute is dropped.

------
thanks
  kevin.foote