Displaying the username requested by Microsoft

[Peter Schober]

Max Nuding via users <users at shibboleth.net> [2026-03-24 12:17 CET]:
> For users coming from Microsoft the POST to /idp/profile/SAML2/POST/SSO
> includes (in addition to the SAMLRequest and RelayState	parameters) a
> "username" parameter. This contains the username which had been entered into
> the username form from Microsoft.

Not that this helps you in any way but... isn't that illegal in SAML?

-peter