shibboleth.c14n.attribute.PrincipalNameLookupStrategy bean

[Michael A Grady]

> On Feb 15, 2017, at 6:51 PM, Andrew Morgan <morgan at orst.edu> wrote:
> 
> The existing example *does* work.  I've been using it since last year. Uhh, I don't understand how it works though.
> 
> Using myself as an example, I can login as "morgan" or "morgan at oregonstate.edu <mailto:morgan at oregonstate.edu>" (any case).  In the audit log, it does resolve to "morgan" (lowercase).

Yes, I worked that out when working with a client, who also was using it successfully, I had to account for the fact that one ended up going thru the resolver multiple times -- for password, for Duo, for the actual standard resolution step, and various of those values it was depending on did or did not have values during some of those passes. Great that nothing that complex is needed now, and can easily be done somewhere else.

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170215/53348455/attachment.html>