<div dir="ltr"><div class="gmail_default" style=""><font face="monospace">Hello -</font></div><div class="gmail_default" style=""><font face="monospace"><br></font></div><div class="gmail_default" style=""><font face="monospace">I'm able to authenticate successfully using the JAAS configuration; however, I don't know how to access the principal name for later use when querying the user attributes from a MySQL database.</font></div><div class="gmail_default" style=""><font face="monospace"><br></font></div><div class="gmail_default" style=""><font face="monospace">If I hardcode the assumed principal as shown below, it returns the correct results; however, I am unsuccessful if I use "$requestContext.principalName".</font></div><div class="gmail_default" style=""><font face="monospace"><br></font></div><div class="gmail_default" style=""><font face="monospace">SELECT * FROM shib_users WHERE userid = 'student000@bandev'<br><br></font></div><font face="monospace">I don't know what should replace "$requestContext" if/when using the c14n/simple post-login subject canonicalization flow.</font><div class="gmail_default" style=""><span style="color:rgb(23,43,77);font-size:16px;letter-spacing:-0.08px"><font face="monospace"><br></font></span></div><div class="gmail_default" style=""><font face="monospace">Here are some log fragments:</font></div><div class="gmail_default" style=""><font face="monospace">DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:97] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/simple for applicability...<br>DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:80] - Profile Action SelectSubjectCanonicalizationFlow: Selecting canonicalization flow c14n/simple<br>DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:225] - Profile Action SimpleSubjectCanonicalization: trimming whitespace of input string 'student000@bandev'<br>DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:114] - Profile Action FinalizeAuthentication: Canonical principal name was established as 'student000@bandev'<br>DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:175] - Profile Action FinalizeAuthentication: Request did not have explicit authentication requirements, result is accepted<br>INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:201] - Profile Action FinalizeAuthentication: Principal student000@bandev authenticated<br></font></div><div><font face="monospace"><br></font></div><div><div class="gmail_default" style=""><font face="monospace">Thanks,</font></div><div class="gmail_default" style=""><font face="monospace">-Jeff</font></div><font face="monospace"><br></font></div><font face="monospace"><span class="gmail_signature_prefix">-- </span><br></font><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><font face="monospace"><a href="https://calendar.google.com/calendar/embed?src=jramsay@binghamton.edu&ctz=America/New_York" style="font-size:12.8px" target="_blank">Jeffrey Ramsay</a><br></font></div><div dir="ltr"><font face="monospace">Assistant Director of Enterprise Systems<br>Binghamton University<br><a href="http://www.binghamton.edu" target="_blank">http://www.binghamton.edu</a><br></font></div></div><div dir="ltr"><font face="monospace"><br></font></div><div dir="ltr"><br></div></div></div></div></div></div></div></div>