Using cn (commonName) as NameID

[Peter Schober]

* Robo Burned <robo at list.ru> [2015-11-25 10:40]:
> I found the following in docs:
> Attribute Retrieval
> LDAP attributes are returned as part of the authentication process and exposed in the LDAPResponseContext.
> By default, attributes will be searched for using the same connection the user authenticated on. 
> I've added cn to both
> idp.authn.LDAP.returnAttributes= cn,passwordExpirationTime,loginGraceRemaining
> and 
> idp.attribute.resolver.LDAP.returnAttributes= cn,homephone,mail

This is the comment above idp.authn.LDAP.returnAttributes in my
ldap.properties file:

## Return attributes during authentication
## NOTE: this is not used during attribute resolution; configure that directly in the
## attribute-resolver.xml configuration via a DataConnector's <dc:ReturnAttributes> element

To just get some data from LDAP into the IDP and release it either as
SAML Attribute or NameID you use the IDP as usual, configuring the
attribute resolver. The IDP ships will many fully functional examples.
Here's the documentation if you prefer to ignore those:
https://wiki.shibboleth.net/confluence/display/IDP30/AttributeResolverConfiguration
https://wiki.shibboleth.net/confluence/display/IDP30/AttributeDefinitionConfiguration
https://wiki.shibboleth.net/confluence/display/IDP30/DataConnectorConfiguration

-peter