configuring idp to release the "remote_user" as nameid

Peter Schober peter.schober at univie.ac.at
Tue Jun 25 10:48:47 EDT 2013


* David Mansfield <shibboleth at dm.cobite.com> [2013-06-25 16:38]:
> I had already tried the below in attribute-resolver.xml (and released it 
> it attribute-filter.xml):
> 
> <resolver:AttributeDefinition xsi:type="PrincipalName" 
> xmlns="urn:mace:shibboleth:2.0:resolver:ad"
>                                id="persistentId" />
> 
> 
> and it isn't working for me.  Now there is no nameid at all in the 
> assertion.  Does this have to have any AttributeEncoders or should it be 
> embedded in another element?

It needs an encoder in order to produce anything on the wire, yes.
Look at the "eduPersonTargetedID" example in the resolver config if
you're hell-bent on violating the SAML spec (cf my other mails),
-peter


More information about the users mailing list