Scoped eppn question

[Bryan Wooten]

I will try and keep this short.

We set up our first Docker SP (and my team’s first SP) to front Grouper. We are mostly a CAS shop but we want (internal team) to start moving to pure SAML.

Our IDP returns scoped eppn but our Grouper instance wants unscoped for our Grouper subjectID filter. (We had success with CAS for SSO)

Is there a way to define unscoped eppn for any given SP? Either on the IDP side or SP side?

I know, I know this horse has been beaten to death but my google foo is failing.

Thanks,

Bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200113/1714b627/attachment.html>