How to include REMOTE_USER in response assertion as NameID or an attribute

[Zhang, Jianjun]

Hi,

I am using Shibboleth idp 4.3 and I have an Apache web server as the reverse proxy in front of the shibboleth idp server. The apache handles the smart card certificate authentication and then it passes the certificate user principal name (UPN) to shibboleth in REMOTE_USER (not header). The Shibboleth uses RemoteUser as the authentication flow and the shibboleth log shows it has successfully authenticated the user certificate of the smart card and also shows the correct UPN in the shibboleth log as the authenticated principal.

But in the SAML assertion response to SP, I see no UPN value on any attributes or NameID. So question is what do I need to do to pass this REMOTE_USER (UPN) on either the nameid or any of the attributes in the SAML response to SP?

I have looked all over the documentation but seem not able to find clear information about this.
Hope you can help me on this.

Thank you very much.
Johnny

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230301/3c95802b/attachment.htm>