Canonical principal help

[Jeffrey J Ramsay]

Hello -

I'm able to authenticate successfully using the JAAS configuration;
however, I don't know how to access the principal name for later use
when querying the user attributes from a MySQL database.

If I hardcode the assumed principal as shown below, it returns the correct
results; however, I am unsuccessful if I use
"$requestContext.principalName".

SELECT * FROM shib_users WHERE userid = 'student000 at bandev'

I don't know what should replace "$requestContext" if/when using the
c14n/simple post-login subject canonicalization flow.

Here are some log fragments:
DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:97]
- Profile Action SelectSubjectCanonicalizationFlow: Checking
canonicalization flow c14n/simple for applicability...
DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:80]
- Profile Action SelectSubjectCanonicalizationFlow: Selecting
canonicalization flow c14n/simple
DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:225]
- Profile Action SimpleSubjectCanonicalization: trimming whitespace of
input string 'student000 at bandev'
DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:114] - Profile
Action FinalizeAuthentication: Canonical principal name was established as
'student000 at bandev'
DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:175] - Profile
Action FinalizeAuthentication: Request did not have explicit authentication
requirements, result is accepted
INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:201] - Profile
Action FinalizeAuthentication: Principal student000 at bandev authenticated

Thanks,
-Jeff

-- 
Jeffrey Ramsay
<https://calendar.google.com/calendar/embed?src=jramsay@binghamton.edu&ctz=America/New_York>
Assistant Director of Enterprise Systems
Binghamton University
http://www.binghamton.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240709/4330fa18/attachment.htm>