nameID question

[Mike Flynn]

Excellent.  Thanks, Scott.  That clears up a lot.


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, September 20, 2013 9:41 AM
Subject: Re: nameID question
 

On 9/20/13 11:43 AM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>So, in order for someone to use this, the Idp would have to do something
>to have this pass to my application as an attribute?

The IdP decides what goes in the Subject, possibly influenced by SP
metadata but mostly it's a local thing. It's not an Attribute.

>  Currently, I never see this as an attribute.

Well, you see headers produced by the SP, not SAML Attributes per se. The
SP can turn a NameID into a header also, but you would have to create a
special mapping for that like any other new Attribute.

But your app layer doesn't see the distinction.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130920/416a3891/attachment.html