<div dir="ltr">The data resolver for LDAP uses requestContext.principalName to connect to LDAP which in our case is filled-in by the user name that was authenticated by CAS. See the example 3 (Define the Search Parameters): <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector">https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector</a></div>
<div class="gmail_extra"><br clear="all"><div><font face="tahoma, sans-serif"><div><font face="tahoma, sans-serif"><br></font></div>Joshua Riffle</font><div><font face="tahoma, sans-serif">Software Engineer<br></font><div>
<font color="#CC0000" face="tahoma, sans-serif"><b>Azusa Pacific University</b></font></div></div></div>
<br><br><div class="gmail_quote">On Mon, Apr 8, 2013 at 10:58 AM, Stein, Eric <span dir="ltr"><<a href="mailto:steine@locustec.com" target="_blank">steine@locustec.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Is there a simple example that shows how to do this for the username? It looks like the IdPAddAttribute examples are hitting a database to pull the attribute.<br>
<br>
Thanks,<br>
Eric Stein<br>
<div class="im HOEnZb"><br>
-----Original Message-----<br>
From: <a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> [mailto:<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>] On Behalf Of Cantor, Scott<br>
Sent: Monday, April 08, 2013 1:40 PM<br>
To: Shib Users<br>
</div><div class="im HOEnZb">Subject: Re: Providing attributes from CAS<br>
<br>
</div><div class="HOEnZb"><div class="h5">On 4/8/13 1:16 PM, "Stein, Eric" <<a href="mailto:steine@locustec.com">steine@locustec.com</a>> wrote:<br>
<br>
>I'm still not sure how to get at the username that Shibboleth IdP is<br>
>putting in by default. It's not in any of the request header<br>
>information that I can see .. how do I access it from an SP?<br>
<br>
You have to define resolver behavior at the IdP to put that into an attribute or a SAML NameID and then extract it on the SP end.<br>
<br>
No, it's not going to show up automatically, that's a major difference between a non-federated system in which a local username is just intrinsically obvious and a federated system where it wouldn't be.<br>
<br>
The typical Shibboleth community attribute for a username of the normal sort is eduPersonPrincipalName, but there are others, and there's the approach of just sticking it into a "uid" attribute for bilateral use, or using the SAML NameID construct.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>