Shibboleth SP not able to get eppn value from Duo SSO

Cathy Scott cathystill at
Fri Jan 21 22:23:17 UTC 2022

Apologies for the imprecise wording. I'm attempting to get a unique value
that aligns with the "username" field values in the application. The
username value is the part before the @ of userPrincipalName. Duo SSO has
preconfigured attributes email address, username, firstname, lastname and
display name. And no way to do a transform (as in ADFS). Can you offer a
suggestion on how to achieve this?

On Fri, Jan 21, 2022 at 2:13 PM Cantor, Scott <cantor.2 at> wrote:

> Nor does this subject line make sense, a persistent NameID is NOT an
> "eppn". There is no such thing formally. "eppn" is a default-supplied
> shorthand variable name for the eduPersonPrincipalName attribute, which is
> not a NameID, and is named with an OID URN when passed properly in SAML.
> -- Scott
> --
> For Consortium Member technical support, see
> To unsubscribe from this list send an email to
> users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list