Mapping '$requestContext.principalName'

[Joshua Brodie]

For legacy reason, which we cannot change in a hurry, we have backend
connections to databases and active directories (both plural).

There is a drive to extend allowing users to authenticate beyond
uid/samAccountName -- to a personal PIN (password remains the same
irrespective of using uid or PIN)

With the number of database lookup requiring the uid (PIN only exists in
the ADs) -- is there a way, when a user uses PIN, instead of uid as the
login name, to map the PIN to login name -- so the database queries can
still work as is?

SELECT name FROM table WHERE username='$requestContext.principalName'
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200416/b73c157b/attachment.html>