About attribute setting to the NameID.

Peter Schober peter.schober at univie.ac.at
Wed Aug 28 03:08:57 EDT 2019


* Tomomi <test.demo.adobe.2 at gmail.com> [2019-08-28 07:43]:
> For example,
> SP1
> Name ID attribute is "mail".

I think that's done already, at least once you do what Stephen
suggested.

> SP2
> Name ID attribute is "userPrincipalName".

If there's a formal standard attribute name defined for that attribute
that's what you'd use as the content of the NameIDFormat XML element
in that SP's metadata (e.g. an http(s) URL or for a hypothetical OID
of 1.2.3.4.5 use could use urn:oid:1.2.3.4.5).

Then configure an attribute-sourced NameID for that "format" in
conf/saml-nameid.xml like you already did for email, sourced from your
userPrincipalName attribute.

-peter


More information about the users mailing list