Change format of SAML response

kachilles k.achilles at fme.de
Mon Jan 21 09:29:39 EST 2019


Hello,

I want to secure my app with shibboleth IP and SAML.
Already did this with ADFS, which works fine.
But with Shibboleth, I've got some problems...
The Response from the ADFS looks like this:
        <Subject>
            <NameID>dmadmin</NameID>
            <SubjectConfirmation
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <SubjectConfirmationData InResponseTo="AQ1"
                                        
NotOnOrAfter="2019-01-15T09:28:44.424Z"
                                        
Recipient="https://172.30.16.184:8443/da/component/main"
                                         />
            </SubjectConfirmation>
        </Subject>
        <Conditions NotBefore="2019-01-15T09:18:44.424Z"
                    NotOnOrAfter="2019-01-15T10:18:44.424Z"
                    >
            <AudienceRestriction>
                <Audience>webtoptest</Audience>
            </AudienceRestriction>
        </Conditions>
        <AttributeStatement>
            <Attribute
Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname">
                <AttributeValue>dmadmin</AttributeValue>
            </Attribute>
        </AttributeStatement>
        <AuthnStatement AuthnInstant="2019-01-15T09:23:44.408Z"
                        SessionIndex="_8c828e4e-db81-457d-817d-1581a2a68132"
                        >
            <AuthnContext>
               
<AuthnContextClassRef>urn:federation:authentication:windows</AuthnContextClassRef>
            </AuthnContext>
        </AuthnStatement>
    </Assertion>


The Shibboleth Response like that:
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
</saml2:AuthnContextClassRef>
 </saml2:AuthnContext>
 </saml2:AuthnStatement>
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" >
<saml2:AttributeValue>dmadmin</saml2:AttributeValue>
 </saml2:Attribute>
 </saml2:AttributeStatement>
</saml2:Assertion>
</saml2p:Response> 


Is it possible to configure Shibboleth, sending the AttributeValue "dmadmin"
as <NameID>dmadmin</NameID>

greetings,
Kevin




--
Sent from:
http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html




--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list