<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 7/1/2024 9:52 AM, Paolo Perfetti via
users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAFn8sXA8LN90VCVhk86E320AZeqaC2Jk6KhUE6ac7=TjHi=Xpg@mail.gmail.com">
<blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">If
nothing else, you can apply CredentialValidator-specific
transforms to change the username before it gets handed to the
code that builds the user filter.<br>
<br>
<util:list id="shibboleth.authn.Password.Transforms"><br>
<bean parent="shibboleth.Pair"
p:first=<a class="moz-txt-link-rfc2396E" href="mailto:^(.+)@osu\.edu$">"^(.+)@osu\.edu$"</a> p:second="$1" /><br>
</util:list><br>
</blockquote>
<div><br>
</div>
<div>
<div style="font-size:small" class="gmail_default">Yes, this is
(kind of) working and that's what I'm already doing (with some
limitations) <br>
</div>
<div style="font-size:small" class="gmail_default">But this
solution has the big drawback that the Principal stored in the
session/context is just <user> (with no <domain>)
and hence: <br>
</div>
<div style="font-size:small" class="gmail_default"> - I cannot
utilize the Principal to select the correct DataConnector
backend in the AttributeResolver (actually done with some
ActivationCondition)<br>
</div>
<div style="font-size:small" class="gmail_default"> - some
conflict could arise when a certain <user> exists both
in <domain1> and <domain2>. </div>
</div>
</blockquote>
<p>You probably want to configure attribute-based subject
canonicalization (c14n) to return something like "mail" instead of
"uid".</p>
<p><a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/x/PJO0vg">https://shibboleth.atlassian.net/wiki/x/PJO0vg</a><br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>