Using cn (commonName) as NameID
Cantor, Scott
cantor.2 at osu.edu
Tue Nov 24 09:41:05 EST 2015
On 11/24/15, 7:49 AM, "users on behalf of Robo Burned" <users-bounces at shibboleth.net on behalf of robo at list.ru> wrote:
>I need 'cn' or commonName to be placed into Subject / NameID of SAML response.
>I've added the attribute definition to the attribute-resolver.xml.
FWIW, that's not how that's done in V3.
>(I see no example for cn in attribute-resolver-full.xml so I got the urn:oid of cn field from external resources)
CN is a meaningless, underspecified attribute, so I didn't include it.
>In logs I see the following error. What is wrong with the context?
I believe that's probably a bug, some kind of error handling issue in conjunction with attribute consent being enabled. Please file it.
-- Scott
More information about the users
mailing list