Proxy IdP hybrid question local and remote IdPs
Peter Schober
peter.schober at univie.ac.at
Wed Sep 9 17:10:17 UTC 2020
* Mak, Steve <makst at upenn.edu> [2020-09-09 18:20]:
> I need to take employeeNumber attribute value and put it into the Subject NameID.
[...]
> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
> p:omitQualifiers="true"
> p:format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
Tangent, and you may not care about it anyway, but sending
employeeNumber as the value of a persistent NameID is not spec-legal.
See my post from yesterday,
http://shibboleth.net/pipermail/users/2020-September/047974.html
and s/email address/employeeNumber/ mentally.
-peter
More information about the users
mailing list