<div dir="ltr">Hi. I have problems sending the email address as NameID in the subject. (I use Novell eDirectory as the datastore and access it using LDAP).<div><br></div><div>Any help is appreciated. <br><div><br></div><div>Here is my configuration :</div><div><br></div><div>Shibboleth version : 2.4.3</div><div><br></div><div>attribute-filter.xml :</div><div><br></div><div><div>&lt;afp:AttributeFilterPolicy id=&quot;releaseGoogleMySiteAEmail&quot;&gt;</div><div>  &lt;afp:PolicyRequirementRule xsi:type=&quot;basic:NOT&quot;&gt;</div><div>     &lt;basic:Rule xsi:type=&quot;basic:AttributeRequesterString&quot; value=&quot;<a href="https://google.com/a/dev.mysiteA.ca">https://google.com/a/dev.mysiteA.ca</a>&quot;/&gt;</div><div>  &lt;/afp:PolicyRequirementRule&gt;</div><div>  &lt;afp:AttributeRule attributeID=&quot;GoogleMySiteAEmail&quot;&gt;</div><div>    &lt;afp:PermitValueRule xsi:type=&quot;basic:ANY&quot; /&gt;</div><div>  &lt;/afp:AttributeRule&gt;</div><div>&lt;/afp:AttributeFilterPolicy&gt;</div><div><br></div><div>-----------------</div><div><br></div><div>attribute-resolver.xml :</div><div><br></div><div><div>&lt;resolver:AttributeDefinition xsi:type=&quot;Simple&quot; xmlns=&quot;urn:mace:shibboleth:2.0:resolver:ad&quot;</div><div>                              id=&quot;GoogleMySiteAEmail&quot;</div><div>                              sourceAttributeID=&quot;email&quot;&gt;</div><div> &lt;resolver:Dependency ref=&quot;myLDAP&quot; /&gt;</div><div>  &lt;resolver:AttributeEncoder xsi:type=&quot;SAML2StringNameID&quot; xmlns=&quot;urn:mace:shibboleth:2.0:attribute:encoder&quot;</div><div>                               nameFormat=&quot;urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified&quot; /&gt;</div><div>&lt;/resolver:AttributeDefinition&gt;</div></div><div><br></div><div><br></div><div><div>     &lt;resolver:DataConnector id=&quot;myLDAP&quot; xsi:type=&quot;dc:LDAPDirectory&quot;</div><div>        ldapURL=&quot;ldap://<a href="http://1.2.3.4:389">1.2.3.4:389</a>&quot; </div><div>        baseDN=&quot;ou=users,o=myCompany&quot; </div><div>        principal=&quot;cn=loginuser,ou=users,o=myCompany&quot;</div><div>        principalCredential=&quot;mypassword&quot;&gt;</div><div>        &lt;dc:FilterTemplate&gt;</div><div>            &lt;![CDATA[</div><div>                (cn=$requestContext.principalName)</div><div>            ]]&gt;</div><div>        &lt;/dc:FilterTemplate&gt;</div><div>    &lt;!--    </div><div>    &lt;ReturnAttributes&gt;cn&lt;/ReturnAttributes&gt;</div><div>    --&gt;</div><div>    </div><div>    &lt;/resolver:DataConnector&gt;</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div class="gmail_signature"><div dir="ltr"><br></div></div>
</div></div></div>