Help setting REMOTE_USER to attribute NameIdentifier - Linux / Apache / SP 2.6

Adam von Nieda adam at vonnieda.org
Fri Jun 9 11:45:39 EDT 2017


   Can you or someone help me map it correctly please? I don’t fully understand how all of this works, and I’m just trying to get REMOTE_USER set to the value of the what I see as “NameIdentifier” in the transaction.log. The configuration I sent in my previous email was what I thought would work, but it doesn’t. You keep referencing NameID, but what I see is NameIdentifier, and I’m confused about that. 

--
Adam von Nieda
Adam at vonNieda.org



> On Jun 9, 2017, at 10:33 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 6/9/17, 11:26 AM, "users on behalf of Adam von Nieda" <users-bounces at shibboleth.net on behalf of adam at vonnieda.org> wrote:
> 
>> in the transaction.log, that’s an attribute that I can reference if it’s mapped correctly, yes?
> 
> If it's mapped correctly.
> 
>> So if I add something like the following to the attribute-map.xml, is this correct? 
> 
> If the NameID Format in the assertion is "urn:oid:1.3.6.1.4.1.5923.1.1.1.100" which would be surprising, though legal, but not by blindly copying in the ScopedAttributeDecoder, which is almost certainly wrong, and the log will tell you that if/when it fails to work.
> 
> -- Scott
> 
> 
> 
> 
> 
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170609/72d913c5/attachment.html>


More information about the users mailing list