Subject c14n on initial AuthnRequest
Herron, Joel D
herronj at uww.edu
Tue Nov 17 18:52:04 UTC 2020
Luckily I'm in the same boat as you. I just flipped it on in my QA system and in worked as expected. I still don't like it but it works.
On 11/17/20, 12:46 PM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:
Also, I don't know exactly how your internals work, but I was fortunate that my internal username normalization matches the LHS of our email addresses. If they hadn't it would have required custom code and a custom flow to do the reverse mapping, essentially like the attribute-based post-login c14n flow does, and I might end up just building that, or a scripted variant, into 4.1.
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users