Subject c14n on initial AuthnRequest

Herron, Joel D herronj at
Tue Nov 17 18:52:04 UTC 2020

Luckily I'm in the same boat as you. I just flipped it on in my QA system and in worked as expected. I still don't like it but it works.


On 11/17/20, 12:46 PM, "users on behalf of Cantor, Scott" <users-bounces at on behalf of cantor.2 at> wrote:


    Also, I don't know exactly how your internals work, but I was fortunate that my internal username normalization matches the LHS of our email addresses. If they hadn't it would have required custom code and a custom flow to do the reverse mapping, essentially like the attribute-based post-login c14n flow does, and I might end up just building that, or a scripted variant, into 4.1.

    -- Scott

    For Consortium Member technical support, see
    To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list