Subject Canonicalization problem

[Cantor, Scott]

On 11/8/15, 9:34 PM, "users on behalf of Michael A Grady" <users-bounces at shibboleth.net on behalf of mgrady at unicon.net> wrote:



>Would that be something like (building on what you sent before, and delving into the Java code around this:
>
>userProvidedUsername = profileRequestContext.getSubcontext(
>	"net.shibboleth.idp.authn.context.SubjectCanonicalizationContext").getSubject().getPrincipals(UsernamePrincipal.class).iterator().next().getname();
>Scripted.addValue( userProvidedUsername );

Yes, imports and such aside, and without any error handling.

I thought about whether it might be worth trying to build something to automate that, but it seemed a little pointless. I also considered whether we should be populating principalName in the resolution context with that value for this particular resolver run, but it seems like a bad idea to contaminate the semantics of that property.

-- Scott