Shibboleth SP not able to get eppn value from Duo SSO

[Cantor, Scott]

On 1/21/22, 5:08 PM, "users on behalf of Cathy Scott" <users-bounces at shibboleth.net on behalf of cathystill at gmail.com> wrote:

>    I have successfully integrated authentication with other IdPs using persistent-id. In fact, I just completed a
> similar Azure IdP integration with persistent-id as the attribute. Shibboleth session summary during that
> implementation showed real value and not a pseudo-random value.

A NameID with that Format is what the standard says it is, and it is never anything but opaque unless the IdP is broken or misconfigured.

-- Scott