how to release uid as nameid

[David Bantz]

If the vendor requires it as the subject of the SAML assertion (as suggested by <saml:subject>... <saml:nameid>yqian</saml:nameid>…), 
that’s different than an attribute in the attribute portion of the assertion.

David Bantz


On Thu, 20 Mar 2014, at 12:00 , Cameron Kerr <cameron.kerr at otago.ac.nz> wrote:

> You will need to allow it to go to the SP involved (ie. edit attribute-filter.xml)
>  
> Cheers,
> Cameron
>  
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Qian, Yi
> Sent: Friday, 21 March 2014 8:51 a.m.
> To: Shib Users
> Subject: how to release uid as nameid
>  
> Hello, 
>  
> The vendor request us to use uid  as nameid,  such as 
> <saml:subject>
>     <saml:nameid>yqian</saml:nameid>
> </saml:subject>
>  
> And in their metadata, they listed nameid format as
> <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:entity</md:NameIDFormat>
>  
> So I tried add following definition in resolver.xml
> <resolver:AttributeDefinition xsi:type="ad:Simple" id="releasedUId" sourceAttributeID="uid">
>         <resolver:Dependency ref="myLDAP" />
>         <resolver:AttributeEncoder xmlns="urn:mace:shibboleth:2.0:attribute:encoder" xsi:type="SAML2StringNameID"nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:entity" />
>     </resolver:AttributeDefinition>
>  
> But, I did not see in the name id in assertion, even I did not see this nameid format be applied in the log
>  
> Thanks
> Yi
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140320/b3ba7bcc/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140320/b3ba7bcc/attachment.bin