SP processing Nameid into headers?
Jan Vilhuber
JVilhuber at absolute.com
Mon Jul 24 04:12:54 EDT 2017
I'm struggling with trying to configure the NameId extraction for my SP. Say I have the following Subject:
<saml:Subject>
<saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">jvilhuber at foo.com</saml:NameID>
<saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml:SubjectConfirmationData InResponseTo="_097e3e662eb9729780c3bbd249977e99"
NotOnOrAfter="2017-07-24T07:46:58Z"
Recipient="https://devlocal.foo.com/Shibboleth.sso/SAML2/POST"/>
</saml:SubjectConfirmation>
</saml:Subject>
For the NameIDAttributeDecodes, it seems it requires a different format for the NameID:
Indicated by xsi:type="NameIDAttributeDecoder", processes SAML attribute values that take the form of a <saml:NameIdentifier> or <saml2:NameID> element
(or the equivalent schema type).
In this case, we have neither of those.
Is there a simple attribute-map decodes that can put this in an attribute? I've tried the various examples in the default file and have been trying to grok the wiki pages for this with limited (no..) success.
Help?
Jan
More information about the users
mailing list