unable to capture eppn information from SAML2/POST at SP

[O'Quinn, Dennis]

>  Don't call it eppn and you won't trip the policy that the SP imposes for the attribute called eppn, which is supposed to be eduPersonPrincipalName. That's a reason why I advised you rename it.

Thanks, but, not sure how to apply that guidance.  This is what the IdP is sending me.  Are you saying I can override that someway and 'change' it to eduPersonPrincipalName?


BTW, Much of the documentation I am reading out there seems to imply that the configuration is being done by 'one' entity with access to "both" IdP and SP configurations and logs simultaneously.

That is not the case for our environment.  I take it that his is much of my problem in working through all these issues?

Thanks again, Dennis



-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Monday, June 11, 2018 5:59 PM
To: Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] Re: unable to capture eppn information from SAML2/POST at SP

On 6/11/18, 4:45 PM, "users on behalf of O'Quinn, Dennis" <users-bounces at shibboleth.net on behalf of DENNIS_OQUINN at homedepot.com> wrote:

> So, now on to figuring out the filters....

Don't call it eppn and you won't trip the policy that the SP imposes for the attribute called eppn, which is supposed to be eduPersonPrincipalName. That's a reason why I advised you rename it.

-- Scott


-- 
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=MtgQEAMQGqekjTjiAhkudQ&r=mn6DeBt1nj8Oqx06pdIK0_n5EfK6FeVHgdjBNpchyro&m=9ALmRSaERLaUdVCT8luLcN-SuwbzD3OdFTV4fF7_OIo&s=4aH1xQw3_48iDsR8e4wGDDkLqBSVNUILbkslB2USFrM&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net