SP processing Nameid into headers?

[Jan Vilhuber]

Nevermind. I think I understand the attributedecoding a bit better now. Sorry for the noise.

To close the loop, here's what I used and works for me:

    <Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" id="User_Email">
        <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$Name" defaultQualifiers="true"/>
    </Attribute>

Jan

> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Jan Vilhuber
> Sent: Monday, July 24, 2017 3:13 PM
> To: Shib Users <users at shibboleth.net>
> Subject: SP processing Nameid into headers?
> 
> I'm struggling with trying to configure the NameId extraction for my SP. Say I
> have the following Subject:
> 		<saml:Subject>
> 			<saml:NameID
> Format="urn:oasis:names:tc:SAML:1.1:nameid-
> format:emailAddress">jvilhuber at foo.com</saml:NameID>
> 			<saml:SubjectConfirmation
> Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
> 				<saml:SubjectConfirmationData
> InResponseTo="_097e3e662eb9729780c3bbd249977e99"
>                 NotOnOrAfter="2017-07-24T07:46:58Z"
>                 Recipient="https://devlocal.foo.com/Shibboleth.sso/SAML2/POST"/>
> 			</saml:SubjectConfirmation>
> 		</saml:Subject>
> 
> For the NameIDAttributeDecodes, it seems it requires a different format for the
> NameID:
>     Indicated by xsi:type="NameIDAttributeDecoder", processes SAML attribute
> values that take the form of a <saml:NameIdentifier> or <saml2:NameID>
> element
>     (or the equivalent schema type).
> 
> In this case, we have neither of those.
> 
> Is there a simple attribute-map decodes that can put this in an attribute? I've
> tried the various examples in the default file and have been trying to grok the
> wiki pages for this with limited (no..) success.
> 
> Help?
> Jan
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net