IdP 3.1/Emailaddress in nameid

[Cantor, Scott]

On 4/10/15, 11:16 AM, "Senthil Ramiah" <sramiah at aileronconsulting.com> wrote:
>
>We have installed shibboleth-identity-provider-3.1.1.2-x64 and are running on Tomcat. We have been able to integrate a custom Jaas authentication module. The authentication works successfully and the authn response is correctly sent to the SP. We would like to send emailaddress (or the username that the user logged in with on the IdP login screen) as the NameId in the authn response. We are not sure as to which config files need to be modified in order for this to work.

It's covered under NameIDGenerationConfiguration on the list of Configuration topics, and the SP's metadata should include an NameIDFormat element with the Format it wants to get.

-- Scott