how to release uid as nameid

[Cameron Kerr]

You will need to allow it to go to the SP involved (ie. edit attribute-filter.xml)

Cheers,
Cameron

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Qian, Yi
Sent: Friday, 21 March 2014 8:51 a.m.
To: Shib Users
Subject: how to release uid as nameid

Hello,

The vendor request us to use uid  as nameid,  such as
<saml:subject>
    <saml:nameid>yqian</saml:nameid>
</saml:subject>

And in their metadata, they listed nameid format as

<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:entity</md:NameIDFormat>


So I tried add following definition in resolver.xml

<resolver:AttributeDefinition xsi:type="ad:Simple" id="releasedUId" sourceAttributeID="uid">

        <resolver:Dependency ref="myLDAP" />

        <resolver:AttributeEncoder xmlns="urn:mace:shibboleth:2.0:attribute:encoder" xsi:type="SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:entity" />

    </resolver:AttributeDefinition>



But, I did not see in the name id in assertion, even I did not see this nameid format be applied in the log



Thanks

Yi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140320/368d2f4f/attachment.html