<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Seems you could consider the two ou's as distinct ldap authentication sources with either as sufficient (in terminology of jaas.config).<br><br><div>David.Bantz<span class="Apple-style-span" style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.231373); -webkit-composition-frame-color: rgba(77, 128, 180, 0.231373); ">@<a href="http://alaska.edu">Alaska.edu</a></span><div><span class="Apple-style-span" style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469);"><br></span></div></div></div><div><br>On Aug 17, 2016, at 08:37, Juan Quintanilla <<a href="mailto:jquin014@fiu.edu">jquin014@fiu.edu</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<div id="divtagdefaultwrapper" style="color: rgb(0, 0, 0); font-family: Book Antiqua; font-size: 12pt; background-color: rgb(255, 255, 255);">
<p>Hi Scott,</p>
<p><br>
</p>
<p>Sorry about that, my question would be what is the best approach configuring shibboleth so that it can authenticate the same user with multiple usernames values?
</p>
<p><br>
</p>
<p>For example:</p>
<p> User john Doe has 2 different usernames in different OU's on Ldap and they are both unique, the authentication piece searches both OU's so there is no problem there with authentication. So if we want to give the user the ability to also authenticate with their
numerical ID we would run into problems with it returning multiple results due to the fact that this users numerical ID is the same for both his usernames. </p>
<p><br>
</p>
<p><span>How can we limit the results returned to the first successful entry and then go about resolving that numerical ID to their respective username instead? </span></p>
<p><br>
</p>
<p>I greatly appreciate any input.</p>
<p><br>
</p>
<p>Thanks for your help.</p>
<p><br>
</p>
<p><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" style="color: rgb(0, 0, 0); font-family: Book Antiqua; font-size: 12pt; background-color: rgb(255, 255, 255);">
<div><font face="Book Antiqua">___________________<br>
</font><font face="book antiqua">Juan Quintanilla</font></div>
<div><font face="book antiqua">Enterprise Systems Group</font></div>
<div><font face="book antiqua">305-348-6573</font></div>
<div><font face="book antiqua"><a id="LPNoLP" href="mailto:jquin014@fiu.edu">jquin014@fiu.edu</a></font></div>
</div>
</div>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<div>
<hr tabindex="-1" style="width: 98%; display: inline-block;">
<div id="x_divRplyFwdMsg" dir="ltr"><font color="#000000" face="Calibri, sans-serif" style="font-size: 11pt;"><b>From:</b> users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> on behalf of Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>><br>
<b>Sent:</b> Wednesday, August 17, 2016 11:28 AM<br>
<b>To:</b> <a href="mailto:users@shibboleth.net">users@shibboleth.net</a><br>
<b>Subject:</b> Re: Shibbboleth IDP 3 Multiple Username Logins</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size: 10pt;">
<div class="PlainText">On 8/17/16 11:15 AM, Juan Quintanilla wrote:<br>
> <br>
> We are currently running Shibboleth IDP 3 using ldap for<br>
> authentication. We would like to be able to have users login with both<br>
> their username (ex: jdoe) as well as their numerical username (ex:<br>
> 1111111) but resolving that value back to their regular username<br>
> (jdoe). Has anyone using shibboleth dealt with authenticating<br>
> different usernames for a user?<br>
<br>
Yes. I'm not sure of your question. There's a whole<br>
SubjectCanonicalization subsystem now devoted to providing a lot of<br>
options for how to deal with that after the fact.<br>
<br>
-- Scott<br>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</span></font></div>
</div>
</div></blockquote><blockquote type="cite"><div><span>-- </span><br><span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></span></div></blockquote></body></html>