Shibboleth SP not able to get eppn value from Duo SSO

[Cantor, Scott]

On 1/21/22, 5:23 PM, "users on behalf of Cathy Scott" <users-bounces at shibboleth.net on behalf of cathystill at gmail.com> wrote:

>    Apologies for the imprecise wording. I'm attempting to get a unique value that aligns with the "username"
> field values in the application. The username value is the part before the @ of userPrincipalName. Duo SSO
> has preconfigured attributes email address, username, firstname, lastname and display name. And no way to
> do a transform (as in ADFS). Can you offer a suggestion on how to achieve this?

The documentation covers how to map anything you want into the system and how to do some degree of transforms, assuming that gets you to a correct value. If you're not getting a matching value in any of the possible inputs, there's not much the SP can do about it.

-- Scott