Using cn (commonName) as NameID

Cantor, Scott cantor.2 at osu.edu
Tue Nov 24 09:41:05 EST 2015


On 11/24/15, 7:49 AM, "users on behalf of Robo Burned" <users-bounces at shibboleth.net on behalf of robo at list.ru> wrote:



>I need 'cn' or commonName to be placed into Subject / NameID of SAML response.
>I've added the attribute definition to the attribute-resolver.xml.

FWIW, that's not how that's done in V3.

>(I see no example for cn in attribute-resolver-full.xml so I got  the urn:oid of cn field from external resources)

CN is a meaningless, underspecified attribute, so I didn't include it.

>In logs I see the following error.  What is wrong with the context?

I believe that's probably a bug, some kind of error handling issue in conjunction with attribute consent being enabled. Please file it.

-- Scott



More information about the users mailing list