<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""> Thanks Scott .. The subject has become misleading so I changed it. I was confused about NameID, that’s not in play here. </div><div class=""><br class=""></div><div class="">So when I see </div><div class=""><br class=""></div><div class="">.. at (ClientAddress: 10.9.231.220) with (NameIdentifier: AvonNieda)</div><div class=""><br class=""></div><div class="">in the transaction.log, that’s an attribute that I can reference if it’s mapped correctly, yes? So if I add something like the following to the attribute-map.xml, is this correct? </div><div class=""><br class=""></div><div class=""><div class=""> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.100" id="NameIdentifier"></div><div class=""> <AttributeDecoder xsi:type="ScopedAttributeDecoder"/></div><div class=""> </Attribute></div><div class=""><br class=""></div></div><div class="">And then reference that via the ID in shibboleth2.xml, like so? </div><div class=""><br class=""></div><div class=""><div class=""> <ApplicationDefaults entityID="<a href="https://hostname/shibboleth" class="">https://hostname/shibboleth</a>"</div><div class=""> REMOTE_USER="NameIdentifier"</div><div class=""> cipherSuites="ECDHE+AESGCM:ECDHE:!aNULL:!eNULL:!LOW:!EXPORT:!RC4:!SHA:!SSLv2"></div></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Adam von Nieda</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;"><a href="mailto:Adam@vonNieda.org" class="">Adam@vonNieda.org</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Jun 9, 2017, at 10:13 AM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 6/9/17, 9:49 AM, "users on behalf of Adam von Nieda" <<a href="mailto:users-bounces@shibboleth.net" class="">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:adam@vonnieda.org" class="">adam@vonnieda.org</a>> wrote:<br class=""><br class=""><blockquote type="cite" class="">and I need the value of NameIdentifier (AvonNieda) to be set as REMOTE_USER. Should it be as simple as changing the following<br class="">in shibboleth2.xml<br class=""><br class="">REMOTE_USER="eppn persistent-id targeted-id"<br class="">to<br class="">REMOTE_USER="NameIdentifier"<br class=""></blockquote><br class="">It is, if the rule you created to map the NameID Format into a local attribute is using an "id" of NameIdentifier. If not, then no, you have to set it to what you did use. Nothing you posted indicates whether you created the mapping rule or not, or what you might have called it.<br class=""><br class="">The SP maps SAML NameIDs and Attributes into "local" attributes. The configuration is the same for both. The former are mapped based on Format. The latter are mapped based on Name.<br class=""><br class="">Both end up in the same place.<br class=""><br class="">REMOTE_USER is just a setting that looks for a value in one or more local attributes and takes the first one it finds.<br class=""><br class="">-- Scott<br class=""><br class=""><br class="">-- <br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""></div></div></blockquote></div><br class=""></body></html>