<div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,all.<div><br></div><div>I could solve this problem.</div><div><br></div><div>To add --sam2 option to aacli.sh allows me to get the result to distinct NameID and attribute.</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Feb 18, 2019 at 12:52 PM Noriyuki TAKEI <<a href="mailto:ntakei@sios.com">ntakei@sios.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,All.<div><br></div><div>I'd like to see whether the correct NameID and attributes I expected are generated before deployment to production.</div><div><br></div><div>In order to do this, I tried to use aacli.sh, but it seems that there is no differences in the result of aacli.sh between NameID and attributes.</div><div><br></div><div>I got the following result, but I don't understand whether o365UserPrincipalName or ImmutableID is the NameID.</div><div><br></div><div><div>{</div><div>"requester": "urn:federation:MicrosoftOnline",</div><div>"principal": "test",</div><div>"attributes": [</div><div><br></div><div><br></div><div> {</div><div> "name": "o365UserPrincipalName",</div><div> "values": [</div><div> "StringAttributeValue{value=<a href="mailto:test@example.com" target="_blank">test@example.com</a>}" ]</div><div> }, </div><div><br></div><div> {</div><div> "name": "ImmutableID",</div><div> "values": [</div><div> "StringAttributeValue{value=test}" ]</div><div> } </div><div><br></div><div>]</div><div>}</div></div><div><br></div><div>I'd like to let me know the way to know whether NameID and attribute send exactly to SP or not before deployment to production.</div><div><br></div></div></div></div></div></div></div></div></div>
</blockquote></div><br clear="all"><div><br></div></div>