Modify Username on Input?

[Cantor, Scott]

> Unfortunately, my java isn't great.  I still don't really know what a bean is.

Well, you're going to have a whole lot of pain, just to be clear. Not in this specific instance, but this system is for people who know Java or are going to learn it very quickly. There's no way around it, and it's always been a precondition, moreso now than ever.

This specific topic isn't highlighted all that much though, it's not obvious without knowing the place to look. See [1], Bean Reference, you'll find the settings in authn/password-authn-config.xml (shibboleth.authn.Password.Transforms)

> And no, I'm not going to just tell my users to learn to type.  This is a
> computer, it should compute things.  Pulling a known substring off the end of
> a string is easy for a computer and hard for 10,000 random humans.

It isn't that cut and dried. This sort of thing engenders plenty of debate about whether it's a good idea or not, one reason being it's very unlikely to be consistently implemented across systems. If the user gets used to mis-entering their name in one spot, they just get angry when it doesn't work everywhere. There are plenty of people who would claim this is bad for usability, not a service to the user.

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/IDP30/PasswordAuthnConfiguration