Custom NameId value

[Mohamed Lrhazi]

 Hello,


am trying to force Assertion/Subject/NameID to be the CN of the user, as
requested by the SP....
I tried adding a custom format in the SP metadata:

<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"</md:NameIDFormat>

and then in saml-nameid.xml :


    <util:list id="shibboleth.SAML2NameIDGenerators">

        <ref bean="shibboleth.SAML2TransientGenerator" />

        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"

p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"
            p:attributeSourceIds="emaintNameid" />

    </util:list>

    <!-- SAML 1 NameIdentifier Generation -->
    <util:list id="shibboleth.SAML1NameIdentifierGenerators">

        <ref bean="shibboleth.SAML1TransientGenerator" />


            p:attributeSourceIds="#{ {'mail'} }" />
        -->

    </util:list>



For p:attributeSourceIds, I tired p:attributeSourceIds="#{ {'emaintNameid'}
}"   as well.
Not sure which is the correct syntax.

The emaintNameid attribute is properly released to the SP, as I actually
see it in the SAML response.

The NameID though is left empty:


2017-03-26 18:26:22,388 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:341] - Profile
Action AddNameIDToSubjects: Unable to generate a NameID, leaving empty
2017-03-26 18:26:22,388 - DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:106]
- Trying to generate identifier with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"


Feels like am close.. but still missing something :)

Thanks a lot,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170326/f2108b78/attachment.html>