Proxy IdP hybrid question local and remote IdPs

Peter Schober peter.schober at univie.ac.at
Wed Sep 9 17:10:17 UTC 2020


* Mak, Steve <makst at upenn.edu> [2020-09-09 18:20]:
> I need to take employeeNumber attribute value and put it into the Subject NameID.
[...]
>     <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
>         p:omitQualifiers="true"
>         p:format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"

Tangent, and you may not care about it anyway, but sending
employeeNumber as the value of a persistent NameID is not spec-legal.
See my post from yesterday,
http://shibboleth.net/pipermail/users/2020-September/047974.html
and s/email address/employeeNumber/ mentally.
-peter


More information about the users mailing list