<html><body><div dir="ltr">
At the risk of muddying the waters, I think Scott is appropriately referring to Shibboleth IdP's very extensive ability to manipulate directory attributes into SAML attributes. Cathy Scott appears to be asking about SAML attribute configuration in Duo’s SSO IdP to deliver a SAML attribute of un-scoped username. The documentation for Duo SSO IdP (<a href="https://duo.com/docs/sso">https://duo.com/docs/sso</a>) suggests only a simple mapping of claim name to directory attribute. That might be enough if your directory contains an un-scoped version of username (perhaps in cn or another attribute).<br><br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 21Jan2022 at 13:38:57, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite">
<div>
<div>
On 1/21/22, 5:23 PM, "users on behalf of Cathy Scott" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:cathystill@gmail.com">cathystill@gmail.com</a>> wrote:<br><br><blockquote type="cite"> Apologies for the imprecise wording. I'm attempting to get a unique value that aligns with the "username"<br></blockquote><blockquote type="cite"> field values in the application. The username value is the part before the @ of userPrincipalName. Duo SSO<br></blockquote><blockquote type="cite"> has preconfigured attributes email address, username, firstname, lastname and display name. And no way to<br></blockquote><blockquote type="cite"> do a transform (as in ADFS). Can you offer a suggestion on how to achieve this?<br></blockquote><br>The documentation covers how to map anything you want into the system and how to do some degree of transforms, assuming that gets you to a correct value. If you're not getting a matching value in any of the possible inputs, there's not much the SP can do about it.<br><br>-- Scott<br><br><br>-- <br>For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</blockquote>
</div>
</div></body></html>