> Well, you can configure your RADIUS server to send a fixed user in some
> other attribute, and map that to local-login-user. I'm not sure how to force a
> particular value (that's not sent from the AAA server) from within the ShibSP
> configuration. Scott will be able to answer that.
Not sure I follow: do you mean how to hardwire the SP to just create a value itself for testing? You can do that with the new resolver plugins in 2.5, the Transform and Template plugins. They can munge or in some cases just create new values.
They can also implement crude mapping behavior where an incoming attribute value Foo gets turned into Bar so that you end up with that as the local username.
-- Scott
|