NameID from Subject

[Andy Bennett]

Hi,

>> How do I get the NameID from the SAML Subject, as logged in
>> transaction.log as opposed to one of the NameIDs in the attributes and
>> supplied in the persistent-id or targeted-id environment variables?
> 
> Firstly, you should not populate those attribute IDs with a value that is
> not semantically a SAML 2 persistent ID. That's a really confusing thing
> to do.
> 
> Secondly, those *are* from the SAML Subject. If you're using a different
> NameID format and you want to extract it, create an Attribute rule in the
> attribute-map file and use the Format as the attribute name to extract.
> 
>> I'd like it to appear as an environment variable so that I can store it
>> in my app along with the attribute information.
> 
> It already does, it just doesn't map any other NameID formats by default.
> 
>> I want something I can use with the resolvertest example.
> 
> I don't know what you mean by that.

If I copy the NameId:, entityID: and Protocol: information from
transaction.log from a "recent" transaction and feed it to resolvertest
then I get some attributes back. If I feed in anything I get from the
persistent-id or transient-id fields in the web server then it doesn't
work. The value in NameID: in the logs never appears in any of the web
server variables but, for a given user, I always get the same value in
persistent-id or transient-id.


This is with SP 2.4.3 in the UK Federation.






Regards,
@ndy

-- 
andyjpb at knodium.com
http://www.knodium.com/