configuring idp to release the "remote_user" as nameid
Peter Schober
peter.schober at univie.ac.at
Tue Jun 25 10:48:47 EDT 2013
* David Mansfield <shibboleth at dm.cobite.com> [2013-06-25 16:38]:
> I had already tried the below in attribute-resolver.xml (and released it
> it attribute-filter.xml):
>
> <resolver:AttributeDefinition xsi:type="PrincipalName"
> xmlns="urn:mace:shibboleth:2.0:resolver:ad"
> id="persistentId" />
>
>
> and it isn't working for me. Now there is no nameid at all in the
> assertion. Does this have to have any AttributeEncoders or should it be
> embedded in another element?
It needs an encoder in order to produce anything on the wire, yes.
Look at the "eduPersonTargetedID" example in the resolver config if
you're hell-bent on violating the SAML spec (cf my other mails),
-peter
More information about the users
mailing list