Help setting NameID

[Cantor, Scott]

On 6/9/17, 9:49 AM, "users on behalf of Adam von Nieda" <users-bounces at shibboleth.net on behalf of adam at vonnieda.org> wrote:

> and I need the value of NameIdentifier (AvonNieda) to be set as REMOTE_USER. Should it be as simple as changing the following
> in shibboleth2.xml
>
> REMOTE_USER="eppn persistent-id targeted-id"
> to
> REMOTE_USER="NameIdentifier"

It is, if the rule you created to map the NameID Format into a local attribute is using an "id" of NameIdentifier. If not, then no, you have to set it to what you did use. Nothing you posted indicates whether you created the mapping rule or not, or what you might have called it.

The SP maps SAML NameIDs and Attributes into "local" attributes. The configuration is the same for both. The former are mapped based on Format. The latter are mapped based on Name.

Both end up in the same place.

REMOTE_USER is just a setting that looks for a value in one or more local attributes and takes the first one it finds.

-- Scott