Help setting NameID

[Cantor, Scott]

>    Hi folks, I’m running Shibboleth SP 2.6.0 on Linux / Apache .
> 
>    I’ve been given a “NameID” of “SAMAccountName” from my ADFS
> administrator, SAML2.0.

That isn't valid, SAML NameID Formats are URIs. So that should be fixed. That notwithstanding,
 
> From what I can tell from the Wiki, this goes in the
> attribute-map.xml? I’m new to this and don’t quite understand what I need
> to add to make this happen. That’s really all I’ve been given, outside of the
> federationmetadata.xml. So hopefully that’s all I need from them.

Well, you shouldn't accept it without establishing an appropriately unique Format, but if you choose to map it, yes, you create an Attribute rule and set the name to the value in the Format of the NameID you want to pull in.

Identifiers are not a simple matter. As the application owner, you need to deeply understand your requirements and how that would impact federating an application to know what kind of identifier(s) you should be prepared to accept. Whether that includes the kind of things people put in their AD's samAccountName field is not something I can say.

-- Scott