Shibboleth SP not able to get eppn value from Duo SSO

Cantor, Scott cantor.2 at
Fri Jan 21 23:43:36 UTC 2022

On 1/21/22, 6:06 PM, "users on behalf of IAM David Bantz" <users-bounces at on behalf of dabantz at> wrote:

>    At the risk of muddying the waters, I think Scott is appropriately referring to Shibboleth IdP's very extensive
> ability to manipulate directory attributes into SAML attributes. 

No, I'm talking about the SP, which can do some basic transforms and replacements to generate new or replacement values. i.e. it can trivially strip scopes or things like that.

But the data has to be coming in, it can't do magic.

-- Scott

More information about the users mailing list