ECP Practical issue

[lalith jayaweera]

Hi Peter,
 
Thanks for the reply,
 
Yes I understand that, attributes we pass after authentication is fully configurable in IdP,
 
but my question is in the authentication block it self, that is, in the absence of full UPN from Office 365 during the authentication flow, how to mimic it as the email address and authenticate against the email attribute in LDAP.
 
because as per my understanding, only local part of UPN becomes the username for the Apache LDAP auth handler in IdP during the office365 flow of execution not the full UPN which is the email address.
 
in our case full UPN(fn.ln @ x.y.z) is same as email, however no such attribute in LDAP to authenticate against for (fn.ln) which is the local part of UPN, so I would like to mimic that to email as @ x.y.z is constant for every students' email address.
 
True you might say it is more of a apache config question....but hope am not along in the office365 + shibboleth integration...

 
> Date: Wed, 4 Nov 2015 11:37:55 +0100
> From: peter.schober at univie.ac.at
> To: users at shibboleth.net
> Subject: Re: ECP Practical issue
> 
> * lalith jayaweera <j_lalith at hotmail.com> [2015-11-04 06:08]:
> > as we know in apache for standard basic ECP configuration we got the
> > below block in apache to authenticate against LDAP.
> 
> What becomes httpd's REMOTE_USER is purely a httpd config issue.
> Your access log would normally also contain the authenticated
> username.
> 
> > However my question is, when ECP works with Office365, only local
> > part of UPN becomes the username for ECP
> 
> Not sure what "username for ECP" means, but that the IDP releases as
> SAML attribute (or NameID) is fully configurable in the IDP, i.e., you
> can release anything you want in whatever format you want (no matter
> how you authnticate in httpd).
> -peter
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151104/6ea7539f/attachment.html>