Shibboleth SP not able to get eppn value from Duo SSO

[Cathy Scott]

Apologies for the imprecise wording. I'm attempting to get a unique value
that aligns with the "username" field values in the application. The
username value is the part before the @ of userPrincipalName. Duo SSO has
preconfigured attributes email address, username, firstname, lastname and
display name. And no way to do a transform (as in ADFS). Can you offer a
suggestion on how to achieve this?



On Fri, Jan 21, 2022 at 2:13 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> Nor does this subject line make sense, a persistent NameID is NOT an
> "eppn". There is no such thing formally. "eppn" is a default-supplied
> shorthand variable name for the eduPersonPrincipalName attribute, which is
> not a NameID, and is named with an OID URN when passed properly in SAML.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220121/d4cc8aaf/attachment.htm>