REMOTE_USER

[Cantor, Scott]

> Is there a way I can set this to the value the user typed into the username
> field (which I believe SAML calls principal?) without having to of to an
> external LDAP/DB to retrieve?

There are many, but the simplest is going to involve mulltiple steps. Such as using the Principal attribute definition, which will generate an attribute directly from the value you want, and then using that as a dependency of the existing Scoped EPPN definition so it gets the scope added.

Attribute definition dependencies don't have to be data connectors, they can be other attribute definitions.

-- Scott