Passing User logon on name into SP

Peter Schober peter.schober at univie.ac.at
Fri Jan 18 06:13:44 EST 2013


* Prasanna <PVBalachandar at imperosoftware.com> [2013-01-18 11:59]:
> I have got my shibboleth SP portal that list all of my SSO apps say gmail,
> docs, sites, office 365, moodle, wordpress etc. I am redirected to my portal
> page after successful authentication by the IdP. 
> 
> I wish to display the logged in user name on my SP portal. Is there any
> possibilities to find the logged in users on the IdP and display it in the
> portal.

Sure. Though the Shibboleth SP knows nothing about portals or "logged
in users", you can use any piece of data the IdP sends and use it in
any way you like at the IdP. You're not limited to using the login
name as used by the IDP at the SP, but of course you can (and
sometimes should, to avoid confusion).

At the IdP you'd send the principal as a SAML attrbute or a NameID,
and the SP you map this to an attribute of your choice and may even
set httpd's REMOTE_USER variable based on that. Then you access that
(or any other attribute) as usual. cf.
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess

If you need guidance on individual steps you'll need to ask more
concrete questions.
-peter


More information about the users mailing list