[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: Shibboleth SP not able to get eppn value from Duo SSO
From:       Cathy Scott <cathystill () gmail ! com>
Date:       2022-01-21 23:45:13
Message-ID: CAJeCK7Q61SFr0zMPHM4EBy8AywHTrbtEF_gxgNRd7AH6Y_0W_w () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Understood, thank you.

On Fri, Jan 21, 2022 at 3:43 PM Cantor, Scott <cantor.2@osu.edu> wrote:

> On 1/21/22, 6:06 PM, "users on behalf of IAM David Bantz" <
> users-bounces@shibboleth.net on behalf of dabantz@alaska.edu> wrote:
>
> >    At the risk of muddying the waters, I think Scott is appropriately
> referring to Shibboleth IdP's very extensive
> > ability to manipulate directory attributes into SAML attributes.
>
> No, I'm talking about the SP, which can do some basic transforms and
> replacements to generate new or replacement values. i.e. it can trivially
> strip scopes or things like that.
>
> But the data has to be coming in, it can't do magic.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe@shibboleth.net
>

[Attachment #5 (text/html)]

<div dir="ltr">Understood, thank you.<br></div><br><div class="gmail_quote"><div \
dir="ltr" class="gmail_attr">On Fri, Jan 21, 2022 at 3:43 PM Cantor, Scott &lt;<a \
href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>&gt; wrote:<br></div><blockquote \
class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex">On 1/21/22, 6:06 PM, &quot;users on behalf of IAM \
David Bantz&quot; &lt;<a href="mailto:users-bounces@shibboleth.net" \
target="_blank">users-bounces@shibboleth.net</a> on behalf of <a \
href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>&gt; \
wrote:<br> <br>
&gt;      At the risk of muddying the waters, I think Scott is appropriately \
referring to Shibboleth IdP&#39;s very extensive<br> &gt; ability to manipulate \
directory attributes into SAML attributes. <br> <br>
No, I&#39;m talking about the SP, which can do some basic transforms and replacements \
to generate new or replacement values. i.e. it can trivially strip scopes or things \
like that.<br> <br>
But the data has to be coming in, it can&#39;t do magic.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a \
href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" \
target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br> To unsubscribe \
from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" \
target="_blank">users-unsubscribe@shibboleth.net</a><br> </blockquote></div>



-- 
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net


[prev in list] [next in list] [prev in thread] [next in thread]