<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Attempting to build a NameID in the SAML subject to meet a vendor requirement.</div><div>The following uses and inserts the right identifier, but despite being based on ePPN, </div><div>appears in the SAML assertion subject un-scoped: If ePPN is <a href="mailto:george@my.domain">george@my.domain</a>, this </div><div>uses the NameID of george in subject portion of the SAML. To meet vendor requirement,</div><div>I need the scoped value <a href="mailto:george@my.domaim">george@my.domaim</a>. Is there a simple way to do that?</div><div><br></div><div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(79, 45, 222); background-color: rgb(255, 250, 194);"><!-- Okta requires something like ePPN in the SAML Subject --></div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(44, 182, 195); background-color: rgb(255, 250, 194);"><<span style="color: #d036cf">resolver</span><span style="color: #4f2dde">:</span>AttributeDefinition</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">id</span><span style="color: #000000">=</span>"oktanameid"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xsi</span><span style="color: #4f2dde">:</span><span style="color: #2cb820">type</span><span style="color: #000000">=</span>"Simple"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xmlns</span><span style="color: #000000">=</span>"urn:mace:shibboleth:2.0:resolver:ad"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">sourceAttributeID</span><span style="color: #000000">=</span>"eduPersonPrincipalName"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xmlns</span><span style="color: #4f2dde">:</span><span style="color: #2cb820">xsi</span><span style="color: #000000">=</span>"<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xmlns</span><span style="color: #4f2dde">:</span><span style="color: #2cb820">resolver</span><span style="color: #000000">=</span>"urn:mace:shibboleth:2.0:resolver"<span style="color: #2cb6c3">></span></div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(44, 182, 195); background-color: rgb(255, 250, 194);"><span style="color: #000000"> </span><<span style="color: #d036cf">resolver</span><span style="color: #4f2dde">:</span>Dependency <span style="color: #2cb820">ref</span><span style="color: #000000">=</span><span style="color: #bf341d">"myLDAP"</span> /></div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #000000"> </span><span style="color: #2cb6c3"><</span><span style="color: #d036cf">resolver</span><span style="color: #4f2dde">:</span><span style="color: #2cb6c3">Dependency </span><span style="color: #2cb820">ref</span><span style="color: #000000">=</span>"eduPersonPrincipalName"<span style="color: #2cb6c3"> /></span></div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(44, 182, 195); background-color: rgb(255, 250, 194);"><span style="color: #000000"> </span><<span style="color: #d036cf">resolver</span><span style="color: #4f2dde">:</span>AttributeEncoder</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xsi</span><span style="color: #4f2dde">:</span><span style="color: #2cb820">type</span><span style="color: #000000">=</span>"SAML2StringNameID"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xmlns</span><span style="color: #000000">=</span>"urn:mace:shibboleth:2.0:attribute:encoder"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">nameFormat</span><span style="color: #000000">=</span>"urn:oasis:names:tc:SAML:2.0:nameid-format:transient"<span style="color: #2cb6c3"> /></span></div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(44, 182, 195); background-color: rgb(255, 250, 194);"><span style="color: #000000"> </span><<span style="color: #d036cf">resolver</span><span style="color: #4f2dde">:</span>AttributeEncoder</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xsi</span><span style="color: #4f2dde">:</span><span style="color: #2cb820">type</span><span style="color: #000000">=</span>"SAML2String"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">xmlns</span><span style="color: #000000">=</span>"urn:mace:shibboleth:2.0:attribute:encoder"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(191, 52, 29); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span><span style="color: #2cb820">name</span><span style="color: #000000">=</span>"urn:oid:1.3.6.1.4.1.5923.1.1.1.6"</div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(44, 184, 32); background-color: rgb(255, 250, 194);"><span style="color: #2cb6c3"> </span>friendlyName<span style="color: #000000">=</span><span style="color: #bf341d">"username"</span><span style="color: #2cb6c3"> /></span></div><div style="margin: 0px; font-size: 11px; font-family: Monaco; color: rgb(44, 182, 195); background-color: rgb(255, 250, 194);"><span style="color: #000000"> </span></<span style="color: #d036cf">resolver</span><span style="color: #4f2dde">:</span>AttributeDefinition></div></div><div><br></div><div>David Bantz</div><div>U Alaska</div></body></html>