About attribute setting to the NameID.
Peter Schober
peter.schober at univie.ac.at
Wed Aug 28 03:08:57 EDT 2019
* Tomomi <test.demo.adobe.2 at gmail.com> [2019-08-28 07:43]:
> For example,
> SP1
> Name ID attribute is "mail".
I think that's done already, at least once you do what Stephen
suggested.
> SP2
> Name ID attribute is "userPrincipalName".
If there's a formal standard attribute name defined for that attribute
that's what you'd use as the content of the NameIDFormat XML element
in that SP's metadata (e.g. an http(s) URL or for a hypothetical OID
of 1.2.3.4.5 use could use urn:oid:1.2.3.4.5).
Then configure an attribute-sourced NameID for that "format" in
conf/saml-nameid.xml like you already did for email, sourced from your
userPrincipalName attribute.
-peter
More information about the users
mailing list