Support for X509SubjectName Name ID

[Ullfig, Roberto Alfredo]

Ok, releasing fixed it. Thanks! Their azure application is still failing - maybe you can give some insight on the matter?

They said something I don't understand and they couldn't clarify:

"We also had to set the Outgoing Claim Type for SAM-Account-Name to "Name Id".  Can you try setting the Outgoing Claim Type to "Name Id"?

and their metadata has this:

<RequestedAttribute Name="SAM-Account-Name" isRequired="true" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" FriendlyName="Name ID" />

Do you think I'd have to create a new attribute called Name ID? I already created one called SAM-Account-Name and am releasing that.

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago
________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, May 14, 2020 9:08 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Support for X509SubjectName Name ID

> You have to give it a source of data if you want to use that particular generator, whether it exists already or you have to
> create something new. If you want to use uid, use uid. Either way it has to exist of course.

(and be released to that SP)

If you really want to use unfiltered attributes as a source that's an optional flag you'd have to enable. I wouldn't do that, it's best as a documentation aid if nothing else to release the underlying data to the SP if it's going to be passed through via NameID.

Only the persistent generator really makes much sense to operate on unfiltered data since it's a transform that would not expose the original source.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200514/4ff1f1b4/attachment.htm>