How to pass UPN (email) attribute to O365?

[Akiko]

I am trying to setup Shibboleth ECP to login Outlook thick client and mobile
devices.  But we are not able to login O365 with UPN (email) address.  Here
is our attribute-resolver.xml.
<resolver:AttributeDefinition id="UserId" xsi:type="ad:Simple"
sourceAttributeID="userPrincipalName">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="IDPEmail" friendlyName="UserId" />
    </resolver:AttributeDefinition> 

<resolver:AttributeDefinition id="ImmutableID" xsi:type="ad:Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="objectGUID">
<resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
    </resolver:AttributeDefinition>

	
		 <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc" 
        useStartTLS="false"
        ldapURL="ldap://TESTNET.TULSACC.EDU:389"
baseDN="DC=testnet,DC=tulsacc,DC=edu"
principal="shibauth at testnet.tulsacc.edu"
        principalCredential="password">
        <FilterTemplate>
            
        </FilterTemplate>
				

If we use CDATA[sAMAccountName=$requestContext.principalName), we are able
to login to O365 with sAMAccoutName at tulsacc.edu (CWID at tulsacc.edu), but we
really like to use email address to login.

I was searching this problem and I found out we may need to use Mapped
Attribute Definition instead of Simple.  But I am not sure the syntax for
this resolver.   Especially, I am not sure what to put in to
<ad:ReturnValue>$[hidden email]</ad:ReturnValue>.

 Another question is if I use Mapped Attribute Definition, do I still need
to use LDAP connector <FilterTemplate>?

I am new to Shibboleth and any help or comments will be appreciated.
Thanks.

Akiko




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/How-to-pass-UPN-email-attribute-to-O365-tp7593677.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.