Hello,
I've installed Apige on prem (base components) and now I'm busy with the integration of apigee-sso component with our external IDP.
Unfortunately our IDP doesn't support "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" as nameid-format.
I've overriden the value of SSO propertie "conf_login_saml_provider_nameid" with "urn:oasis:names:tc:SAML:2.0:nameid-format:transient".
Now I'm able to receive the IDP response SAML.
However the email information is not located under <saml:NameID>. It's located under the saml attribute "mail" 😞
<saml:AttributeStatement>
<saml:Attribute Name="mail">
<saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">xxxx@yyy.be</saml:AttributeValue>
</saml:Attribute>
...
<saml:AttributeStatement>
Is there a way to tell apigee-sso component to search in another place than <saml:NameID> , for example something like <sam:attribute Name="mail">?
Thanks in advance.
LinkedIn
Twitter
