Help setting REMOTE_USER to attribute NameIdentifier - Linux / Apache / SP 2.6

[Adam von Nieda]

> You can't map in a NameID in unless you know the Format XML attribute used. Which you posted, and I have no specific memory other than that it was some string, and I said "well, that's an illegal value, but you can use it if you're willing to accept broken SAML". Whatever it is, that's what goes in the rule.

What I posted was an entry that I copied and modified because I don’t know what I’m doing. Can we forget that please, and assume that my attribute-map.xml file is as delivered and go from there? 

>You can't map in a NameID in unless you know the Format XML attribute used

OK, so do I need to get that from the response XML that the IdP sends to Shibboleth? If so, what would be the right debug option to set in order to write that out so I can look at it? 

--
Adam von Nieda
Adam at vonNieda.org



> On Jun 9, 2017, at 1:13 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> You can't map in a NameID in unless you know the Format XML attribute used. Which you posted, and I have no specific memory other than that it was some string, and I said "well, that's an illegal value, but you can use it if you're willing to accept broken SAML". Whatever it is, that's what goes in the rule.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170609/6555487f/attachment.html>