Change format of SAML response
kachilles
k.achilles at fme.de
Mon Jan 21 09:29:39 EST 2019
Hello,
I want to secure my app with shibboleth IP and SAML.
Already did this with ADFS, which works fine.
But with Shibboleth, I've got some problems...
The Response from the ADFS looks like this:
<Subject>
<NameID>dmadmin</NameID>
<SubjectConfirmation
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<SubjectConfirmationData InResponseTo="AQ1"
NotOnOrAfter="2019-01-15T09:28:44.424Z"
Recipient="https://172.30.16.184:8443/da/component/main"
/>
</SubjectConfirmation>
</Subject>
<Conditions NotBefore="2019-01-15T09:18:44.424Z"
NotOnOrAfter="2019-01-15T10:18:44.424Z"
>
<AudienceRestriction>
<Audience>webtoptest</Audience>
</AudienceRestriction>
</Conditions>
<AttributeStatement>
<Attribute
Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname">
<AttributeValue>dmadmin</AttributeValue>
</Attribute>
</AttributeStatement>
<AuthnStatement AuthnInstant="2019-01-15T09:23:44.408Z"
SessionIndex="_8c828e4e-db81-457d-817d-1581a2a68132"
>
<AuthnContext>
<AuthnContextClassRef>urn:federation:authentication:windows</AuthnContextClassRef>
</AuthnContext>
</AuthnStatement>
</Assertion>
The Shibboleth Response like that:
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
</saml2:AuthnContextClassRef>
</saml2:AuthnContext>
</saml2:AuthnStatement>
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" >
<saml2:AttributeValue>dmadmin</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
</saml2:Assertion>
</saml2p:Response>
Is it possible to configure Shibboleth, sending the AttributeValue "dmadmin"
as <NameID>dmadmin</NameID>
greetings,
Kevin
--
Sent from:
http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list