Shibboleth SP not able to get eppn value from Duo SSO

Cantor, Scott cantor.2 at
Fri Jan 21 22:38:57 UTC 2022

On 1/21/22, 5:23 PM, "users on behalf of Cathy Scott" <users-bounces at on behalf of cathystill at> wrote:

>    Apologies for the imprecise wording. I'm attempting to get a unique value that aligns with the "username"
> field values in the application. The username value is the part before the @ of userPrincipalName. Duo SSO
> has preconfigured attributes email address, username, firstname, lastname and display name. And no way to
> do a transform (as in ADFS). Can you offer a suggestion on how to achieve this?

The documentation covers how to map anything you want into the system and how to do some degree of transforms, assuming that gets you to a correct value. If you're not getting a matching value in any of the possible inputs, there's not much the SP can do about it.

-- Scott

More information about the users mailing list