nameID question

[Cantor, Scott]

On 9/20/13 11:43 AM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>So, in order for someone to use this, the Idp would have to do something
>to have this pass to my application as an attribute?

The IdP decides what goes in the Subject, possibly influenced by SP
metadata but mostly it's a local thing. It's not an Attribute.

>  Currently, I never see this as an attribute.

Well, you see headers produced by the SP, not SAML Attributes per se. The
SP can turn a NameID into a header also, but you would have to create a
special mapping for that like any other new Attribute.

But your app layer doesn't see the distinction.

-- Scott