Configuring RemoteUser checkHeaders in IDP3

[Tom Zeller]

On Wed, Jul 13, 2016 at 3:09 PM, Rich Graves <rgraves at carleton.edu> wrote:
> We now have the subject. Which for uninteresting reasons is
> scoped, and we need the unscoped username for attribute resolution purposes.
>
> Now how can we strip the domain, returning just username? I.e., for
> RemoteUser, where would I stick this? In IDP 2.x, you could define principal
> as an attribute and hack at it there, but does that still valid in 3.0?
>
>     <util:list id="shibboleth.authn.RemoteUser.Transforms">
>         <!--
>         <bean parent="shibboleth.Pair" p:first="^(.+)@example\.edu$"
> p:second="$1" />
>         -->
>     </util:list>

See "shibboleth.c14n.simple.Transforms" in
$idp.home/conf/c14n/simple-subject-c14n-config.xml