<div dir="ltr">Hi, <div><br></div><div style>Thanks for the info (and patience).</div><div><br></div><div>What is being asked by the customer is for the local identity used by the SP to be communicated to the partner IdP. It's been described in the documents that I have received as if the Subject in an AuthnRequest could be used to do so, but I had already guessed from reading the chapters in the SAML technical overview on federated identities and my attempts with Shibboleth, that this would not be the case.</div>
<div><br></div><div style>Would there be another way that is supported by Shibboleth and the SAML specs to communicate the local identity to partners when creating a federated identity, and to have it used as the federated identifier?</div>
<div style><br></div><div style>Cheers,</div><div style>Jurgen</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Mar 14, 2013 at 1:26 PM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Jurgen Van Oosterwijck <<a href="mailto:jurgen.vanoosterwijck@gmail.com">jurgen.vanoosterwijck@gmail.com</a>> [2013-03-14 13:01]:<br>
<div class="im">> Thanks for that info.<br>
><br>
> I had indeed already seen that thread. It implies that it is not<br>
> possible to include a Subject element with a dynamically injected<br>
> local username?<br>
<br>
</div>I can only repeat what Scott already said there.<br>
<br>
Yes. Only for the parameters which the SP exposes.<br>
(Seems setting a subject in an authentication request is not a very<br>
common thing to do. No idea how useful it actually is.)<br>
<div class="im"><br>
> Also, that the only possible solution would then be to use an API to<br>
> generate that request myself e.g. in my application code?<br>
<br>
</div>Yes. IMHO you wouldn't need an API for generating a few static lines<br>
of XML with a couple of variables replaced within, but how you do that<br>
is really up to you.<br>
<div class="HOEnZb"><div class="h5">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>