Shibboleth SP not able to get eppn value from Duo SSO

[Cantor, Scott]

On 1/21/22, 6:06 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:

>    At the risk of muddying the waters, I think Scott is appropriately referring to Shibboleth IdP's very extensive
> ability to manipulate directory attributes into SAML attributes. 

No, I'm talking about the SP, which can do some basic transforms and replacements to generate new or replacement values. i.e. it can trivially strip scopes or things like that.

But the data has to be coming in, it can't do magic.

-- Scott