Shibboleth Identity Provider 3.2.1 custom authentication configuration
Raymond Gardner
r.gardner at ntta.com
Mon Jul 11 17:57:50 EDT 2016
>> [Raymond Gardner] You seem to be losing me. This is not a SP
>> requirement. All the SP cares about is that the Subject -> NameID is valid as well as any extra attributes.
>> These are authentication requirements. The IdP is responsible for authentication.
>I thought you phrased this originally as needing to do something for a specific SP, so I took that to mean it wasn't a routine thing.
[Raymond Gardner] Maybe that was my bad phrasing. This is an authentication requirement we are trying to achieve with our IdP.
I will keep working on it.
>> [Raymond Gardner] I'm just trying to transform the username. Whether
>> that happens by regular expression or by a mapping stored in a database, it shouldn't matter.
>> If the application doesn't support this, then the application doesn't
>> support it. That is fine.
>It *does* matter what that step is, if the code is written to assume a regular expression, which it was. If you want a feature to extend that with an interface that's more pluggable, you can certainly file a request for that.
[Raymond Gardner] Certainly! If the code doesn't support it, then it doesn't support it. I think this would be a useful feature enhancement. I'll file a request to extend an interface for this Transform bean when I figure out how to file a request.
I'll keep looking at this myself.
Thanks for the input,
Raymond
****************************************************************
This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. NTT America makes no warranty that this email is error or virus free. Thank you.
****************************************************************
More information about the users
mailing list