configuring idp to release the "remote_user" as nameid

[Peter Schober]

* David Mansfield <shibboleth at dm.cobite.com> [2013-06-25 16:16]:
> The IdP sits behind apache with mod_auth_kerb doing http Negotiate 
> authentication and passing the REMOTE_USER to the IdP (running in a 
> tomcat web container).
[...]
> However, by default I was getting a transient nameId - some sort of hex  
> string, probably a session id or something.
> 
> I'd like the users "remote user" as a saml22 persistent nameid, but I 
> can't figure out what the correct sourceAttributeId would be (if
> any).

I think it's
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverPrincipalNameDefinition
(linked from
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute
via
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier)
-peter