Subject c14n on initial AuthnRequest

Herron, Joel D herronj at uww.edu
Tue Nov 17 18:52:04 UTC 2020


Luckily I'm in the same boat as you. I just flipped it on in my QA system and in worked as expected. I still don't like it but it works.

--Joel

On 11/17/20, 12:46 PM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

    *EXTERNAL EMAIL*

    Also, I don't know exactly how your internals work, but I was fortunate that my internal username normalization matches the LHS of our email addresses. If they hadn't it would have required custom code and a custom flow to do the reverse mapping, essentially like the attribute-based post-login c14n flow does, and I might end up just building that, or a scripted variant, into 4.1.

    -- Scott


    -- 
    For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net




More information about the users mailing list