Use the username in subject of SAML request

[Cantor, Scott]

On 7/6/21, 6:09 AM, "users on behalf of KUMAR Hemant" <users-bounces at shibboleth.net on behalf of Hemant.KUMAR at idemia.com> wrote:

>    Right now in our SAML IDP authentication user need to input the username again, we want to reuse the value
> passed in the Subject field of the SAML request, can you guide has how we can configure the same in
> Shibboleth IDP.

That's not what the Subject element means in SAML and using that way is inappropriate. It's not a hint. It's a means of controlling the subject the resulting assertion is about when it can't be inferred from context. SSO already has that context, it's simply whoever is sitting at the browser. There is no way to say "use this value as a hint for the authentication process" in SAML, it was not made part of the standard.

-- Scott