namedID

[Nate Klingenstein]

Hong,

You will need to have some attribute mapping available for the inbound NameID, and that will be different for different kinds of NameID's.  There is no general answer because of that.  Once mapped, the NameID is available like any other attribute.

https://wiki.shibboleth.net/confluence/display/SHIB2/NameIDAttributes

Here's the documentation on mapping it:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeDecoder#NativeSPAttributeDecoder-NameIDAttributeDecoder

If you have a more specific question we can give you a more specific answer.

Thanks,
Nate.

On May 23, 2014, at 1:55 PM, Hong Ye <hy93 at cornell.edu>
 wrote:

> Hi,
> 
> I'm new to Shibboleth SP.  From Idp process log, I saw NameID was sent back in saml2 assertion's subject for my SP. But how can my SP get and use the nameID that was sent back from IDP? Is there any configuration need to be done in SP?
> 
> Thanks,
> 
> Hong
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net