<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 4/10/2025 3:00 PM, o haya via users
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CABbNdt5v+ObzKAuYA91FxZsY9kPt-9cj0bKpyiCWQwqCEVerrA@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div><br>
<saml2:Attribute FriendlyName="uid"
Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br>
<saml2:AttributeValue>test1</saml2:AttributeValue><br>
</saml2:Attribute><br>
<saml2:Attribute
FriendlyName="eduPersonPrincipalName"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br>
<saml2:AttributeValue><a
href="mailto:test1@xxxx.com" moz-do-not-send="true"
class="moz-txt-link-freetext">test1@xxxx.com</a></saml2:AttributeValue><br>
</saml2:Attribute><br>
</saml2:AttributeStatement></div>
[...]<br>
<div>Does the above mean that the Shibboleth IdP currently can
get the "uid" attribute from the user in LDAP (which we
probably do use), and not the "eduPersonPrincipalName"
attribute (from the value it looks like that might actually be
the emailAddress attribute in the LDAP?) ? <br>
</div>
</div>
</blockquote>
<p>It is able to get "uid" from LDAP, and it creates a
eduPersonPrincipalName value based on a scope and the uid from
LDAP.<br>
</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:CABbNdt5v+ObzKAuYA91FxZsY9kPt-9cj0bKpyiCWQwqCEVerrA@mail.gmail.com">
<div dir="ltr">
<div>Also does that help for figuring out how to get the NameID
to work?</div>
</div>
</blockquote>
<p>NameIDs a are separate thing. Check here:</p>
<p><a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507810/NameIDGenerationConfiguration">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507810/NameIDGenerationConfiguration</a></p>
<p>and the subtopic on Custom NameID generation has an example that
might be relevant.<br>
</p>
<br>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>