Configuring RemoteUser checkHeaders in IDP3

[Cantor, Scott]

On 7/13/16, 4:09 PM, "users on behalf of Rich Graves" <users-bounces at shibboleth.net on behalf of rgraves at carleton.edu> wrote:

> Done, thanks! We now have the subject. Which for uninteresting reasons is scoped, and
> we need the unscoped username for attribute resolution purposes.
>   
> Now how can we strip the domain, returning just username?

You can do it on the way in during authentication, you can do it afterwards as part of subject c14n (the "simple" c14n flow can do basic transforms), or you can do it in the resolver in more ways than I'm sure I could even come up with.

-- Scott