NameID from Subject

[Cantor, Scott]

On 8/4/14, 1:16 PM, "Andy Bennett" <andyjpb at knodium.com> wrote:
>
>How do I get the NameID from the SAML Subject, as logged in
>transaction.log as opposed to one of the NameIDs in the attributes and
>supplied in the persistent-id or targeted-id environment variables?

Firstly, you should not populate those attribute IDs with a value that is
not semantically a SAML 2 persistent ID. That's a really confusing thing
to do.

Secondly, those *are* from the SAML Subject. If you're using a different
NameID format and you want to extract it, create an Attribute rule in the
attribute-map file and use the Format as the attribute name to extract.

>I'd like it to appear as an environment variable so that I can store it
>in my app along with the attribute information.

It already does, it just doesn't map any other NameID formats by default.

>I want something I can use with the resolvertest example.

I don't know what you mean by that.

-- Scott