<div dir="ltr">Thanks I guess what I mean is, we are able to log in with no problems, just that the user name presented is not what we want. In my example, login is peted and I want Pete. And I'm still learning. The wiki is a big help. I followed your wiki and then the information from ESRI - <a href="http://doc.arcgis.com/en/arcgis-online/reference/configure-shibboleth.htm">http://doc.arcgis.com/en/arcgis-online/reference/configure-shibboleth.htm</a> I also posted on ESRI's forums. I'm thinking the givenname attribute isn't being sent correctly to ArcGIS Online or mapped to some weird attribute name.</div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 23, 2014 at 1:53 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">On 4/23/14, 1:11 PM, "P Diak" <<a href="mailto:pete_diak@hotmail.com">pete_diak@hotmail.com</a>> wrote:<br>
><br>
>Everything is working fine, but at login my user name is showing as<br>
>peted. I want just Pete.<br>
<br>
</div><div class="">>Trying to figure out why the principal name is being used as the<br>
>givenName. Ideas?<br>
<br>
</div>How do you know that it is? Why are you assuming givenName is involved?<br>
Your sample below is not showing a SAML Attribute element. Unless maybe<br>
you mean that the source of the data being sent in your directory is<br>
itself givenName.<br>
<div class=""><br>
>Also, I'm new to Shibboleth, I figure this is probably something simple.<br>
<br>
</div>It will not be simple if you don't find the documentation itself<br>
understandable. You may well not, but it's all we have.<br>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute</a><br>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier</a><br>
<div class=""><br>
<br>
>Also, here is a snippet from a SAML tracer trace:<br>
<br>
</div>That is not givenName in SAML terms, it's a NameID (name identifier)<br>
configured with a poor choice of Format and set to include whatever data<br>
you happen to be feeding it to populate the identifier with. The second<br>
link above describes how you end up configuring things to do that.<br>
<br>
The starting point here is not really the IdP but the SP. What does the SP<br>
require? What SAML attributes or faling that, what NameID format(s) does<br>
it want to receive? Until you know that, you don't have sufficient<br>
information to configure the IdP to do what you need.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>