Transforms on RemoteUser

[Simon Lundström]

On Tue, 2018-05-08 at 14:38:45 +0200, Peter Schober wrote:
>* Peter Schober <peter.schober at univie.ac.at> [2018-05-08 14:32]:
>> * Simon Lundström <simlu at su.se> [2018-05-08 13:53]:
>> > Just to eradicate my last hope, there isn't a way to use Transforms
>> > with RemoteUser, right?
>> >
>> > I want to strip the @REALM from what we get from REMOTE_USER.
>>
>> At some point you will pull REMOTE_USER into an attribute definition
>> with the IDP, no? Other attribute defintions can pull in that value
>> and free manipulate it?
>
>Also I'd expect Subject Canonicalization to work just the same,
>e.g. the example from SPNEGO:
>https://wiki.shibboleth.net/confluence/display/IDP30/SPNEGOAuthnConfiguration#SPNEGOAuthnConfiguration-ConfiguringSubjectCanonicalization

Sadly, that doesn't work (I have tried it). And I suspect it has 
something to do with RemoteUser being an "External" Servlet-thingy.

BR,
- Simon