Is there any way to send 'Principal' to SP side without using Custom Dataconnector?

Rod Widdowson rdw at steadingsoftware.com
Tue Dec 23 01:11:58 EST 2014


> But still i am not clear how to get the Principal at SP side without dataconnector.

The same way you get any other attribute.  Encode it suitably and arrange for your filters to release it to that SP.  If needs be configure the SP to make the attribute to the Application.

> What this means from the docs 'The principal name comes exclusively from internal IdP state.'?

That is just an indication that the principal might not be in the format that you expected.  For instances after logging in against active directory you might expect the principal to be 'EXAMPLE/USER' but it might be 'user at example.com' or just 'user'.  It will all depend on what the login handler has converted whatever the user entered.  For any given handler this conversion will always be consistent, but you may need to add some conversion into the mix.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141223/50450d50/attachment.html 


More information about the users mailing list