AWS AppStream

[Hong Ye]

Hello,

Has anyone integrated AWS AppStream with Shibboleth IDP 3? In AWS document, it has a note say ‘For stacks with domain-joined fleets, the NameID for the user must be provided in the format of "domain\username" using the sAMAccountName or "username at domain.com<mailto:username at domain.com>" using userPrincipalName. If using the sAMAccountName format, the domain can be specified using either the NetBIOS name or the fully qualified domain name (FQDN).’

According to AWS’s metadata(https://signin.aws.amazon.com/static/saml-metadata.xml), it requires nameID format:
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

Is it possible to use userPrincipalName as the value of persistentID just for AWS?

Thanks,
Hong


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170804/2b8f70f5/attachment-0001.html>