Injecting username into the IdP login field from an SP request

[Cantor, Scott]

On 9/5/17, 9:35 AM, "users on behalf of Dave Perry" <users-bounces at shibboleth.net on behalf of Dave.Perry at hull-college.ac.uk> wrote:

> BUT we want to inject the username they have entered already, to save them entering it twice.
> Is there a way to trigger a request for a shibboleth session, sending their user ID?

The only way to communicate that in SAML has completely mandatory semantics that require that the identity of the user match the identity passed in a Subject element from the SP. Populating that is not supported by the Shibboleth SP without using some more advanced features, and it requires the IdP have support configured to reverse map the Subject's NameID value (that's the second more advanced form of subject canonicalization in the IdP). It will store off that principal name, and in theory it could be used to populate the field.

Personally, I would just tell them all their users are probably using form-fillers anyway.

-- Scott