<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><br class=""></div><span style="font-size: 14px;" class=""> Thanks for the replies Scott, still learning ..</span><div class=""><span style="font-size: 14px;" class=""><br class=""></span></div><div class=""><span style="font-size: 14px;" class=""> I’m now being redirected to the IdP and back to the application, and it seems I’ve gotten authenticated. I can see the following in my transaction.log. </span></div><div class=""><span style="font-size: 14px;" class=""><br class=""></span></div><div class=""><span style="font-size: 14px;" class=""> 2017-06-08 15:23:41 INFO Shibboleth-TRANSACTION [5]: New session (ID: _6f2050c224707a447eb0d3700b24b976) with (applicationId: default) for principal from (IdP: <a href="http://fs1.somehost.com/adfs/services/trust" class="">http://fs1.somehost.com/adfs/services/trust</a>) at (ClientAddress: 10.9.231.220) with (NameIdentifier: AvonNieda) using (Protocol: urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID: _81817b56-0ac3-4f8b-a7a6-1ffe1c9b1055)</span></div><div class=""><span style="font-size: 14px;" class=""><br class=""></span></div><div class=""><span style="font-size: 14px;" class=""> Would there be a way that I can map NameIdentifier to a REMOTE_USER HTTP (or any) header variable? I’ve found references but I don’t quite understand how to implement. </span></div><div class=""><span style="font-size: 14px;" class=""><br class=""></span></div><div class=""><span style="font-size: 14px;" class=""> Thanks again,</span></div><div class=""><span style="font-size: 14px;" class=""><br class=""></span></div><div class=""><span style="font-size: 14px;" class=""> -Adam </span></div><div class=""><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Adam von Nieda</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;"><a href="mailto:Adam@vonNieda.org" class="">Adam@vonNieda.org</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Jun 8, 2017, at 10:57 AM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><blockquote type="cite" class=""> So do I NEED to do something about NameID on the SP side, or can I ignore<br class="">this information that I’ve been given?<br class=""></blockquote><br class="">I can't answer what your application requires for user identification or authorization.<br class=""><br class=""><blockquote type="cite" class="">I assumed that was the problem when<br class="">I hit the test page, it redirected me to the IdP, but the below error came<br class="">back. <br class=""></blockquote><br class="">That has nothing to do with the SP absent more information. If the IdP refuses to respond successfully, then only the IdP can say why.<br class=""><br class="">-- Scott<br class=""><br class=""><br class="">-- <br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a></div></div></blockquote></div><br class=""></div></body></html>