Get back user name

[Cantor, Scott]

> I know this is super basic, but I need some hand holding. We are going to
> support SAML in our app. We will pass in the values via headers (yes, I know,
> security, but there isn't any good integration with any web server with our
> application framework).  How can I get the user name entered in the IdP into
> the headers the SP is providing to Apache?

Since I don't know what you don't know, and while I won't really be able to help much on list for free, I did just want to say that unless that question is just purely in the context of testing, that's not really something you do. Not in SAML and not in any other identity protocol. What the user enters into the IdP has more or less nothing to do with the ways users need to be identified in applications or between organizations. What the user can enter is a local detail.

The question has a pathological "this is how to do that specific thing" answer, it's just that that thing isn't something real systems do.

-- Scott