Passing User logon on name into SP

Peter Schober peter.schober at univie.ac.at
Fri Jan 18 11:23:55 EST 2013


* Prasanna <PVBalachandar at imperosoftware.com> [2013-01-18 17:16]:
> Thanks for your reply Peter. I think I have got some progress. I passed the
> display name from IdP to SP. Please find the screenshot below,

Note that the display Name is not usually the username (or NetID or
uid or principal name or whatever) of the logged in subject.
> 
> <http://shibboleth.1660669.n2.nabble.com/file/n7584157/1.png> 
> 
> <http://shibboleth.1660669.n2.nabble.com/file/n7584157/2.png> 
> 
> <http://shibboleth.1660669.n2.nabble.com/file/n7584157/3.png> 

Also note that unless yuo're using SAML1 (unlikely but impossible for
me to know) that last image from your SP's attribute-map.xml will not
do anything since it's SAML1 specific.
You'd need to include (or uncomment) the line with the SAML2 attribute
name (the "name" of the second AttributeEncoder, in your example from
the IdP's attribute-resolver.xml).

> My question is, how can I use the received display name on the SP
> side on my portal page which is index.html

This is how:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess
If you don't understand it (note the examples at the end of that page)
please ask what specifically is unclear. Or alternatively descibe your
environment (the programming language, API, technology with which you
want to show this data; static HTML cannot include dynamic values).
-peter


More information about the users mailing list