Attribute name/value pairs sent by your IdP

By: Abdulkader Anwar user 03 Dec 2020 at 8:11 a.m. CST

7 Responses
Abdulkader Anwar gravatar
Hi there, We successfully linked our e-learning portal with gluu server for sso. But the challenge is Gluu sending uid as username to SP. We would like to send the preferredUsername as username. I tried enable openid in the preferredUsername attribute and still we are not able to see the enabled attribute from SP side. Please refer the below screen shot for the same. ![](https://www.linkpicture.com/q/idp-attributes.png) Is there anyway i can send preferredUsername to the SP portal. thanks :) Tropical regards, anwar
CentOS 7.0
closed

Answers

By Michael Schwartz Account Admin 03 Dec 2020 at 1:45 p.m. CST

Copy
Michael Schwartz gravatar
Maybe make an attribute called "preferredUsername" in LDAP, populate the value you like, and release that claim instead. In 4.2 there is a script for dynamic claims.

By Mobarak Hosen Shakil staff 04 Dec 2020 at 9:58 a.m. CST

Copy
Mobarak Hosen Shakil gravatar
Hi Abdulkader Anwar! If you want to send `PreferredUsername` instead of `uid` you can try in this way: - **Active** `PreferredUsername` from attributes tab in GLUU GUI with usage type `OpenID` - **Go to** OpenID Connect -> scopes - from list of scopes click on -> `user_name` to update this scope - at the `Claims` replace `Username` with `PreferredUsername` - update it Then check, is it working or not? Please let me know the result. Thanks and Regards ~ Shakil

By Abdulkader Anwar user 04 Dec 2020 at 10:59 p.m. CST

Copy
Abdulkader Anwar gravatar
> https://support.gluu.org/single-sign-on/9185/attribute-namevalue-pairs-sent-by-your-idp/#at66320 > Hi @Mobarak Hosen.Shakil Will try and revert you back. Thank you very much for your time :) Tropical regards, Anwar

By Mobarak Hosen Shakil staff 14 Dec 2020 at 2:08 a.m. CST

Copy
Mobarak Hosen Shakil gravatar
Closing this ticket. Please, reopen the ticket if required. Thanks & Regards ~ Shakil

By Abdulkader Anwar user 15 Dec 2020 at 6:12 a.m. CST

Copy
Abdulkader Anwar gravatar
https://support.gluu.org/single-sign-on/9185/attribute-namevalue-pairs-sent-by-your-idp/#at66320 Hi Sorry for the delayed response :( it didnt work also the moment i change the attributes i am getting locked out from Gluu Server saying "LOGIN FAILED, OXTRUST WASN'T ALLOWED TO ACCESS USER DATA". Is there anyway to check the sync logs between gluu and our portal. thanks :) anwar

By Mobarak Hosen Shakil staff 15 Dec 2020 at 7:19 a.m. CST

Copy
Mobarak Hosen Shakil gravatar
sorry for the interrupt! can you login right now? Did you create any backup? Actually I forgot to mention. `user_name` this scopes also used in gluu server login. We have to relase by creating a custom scopes with `preferredUsername`. Can you please try in this way. Thanks & Regards ~ Shakil

By Abdulkader Anwar user 23 Jan 2021 at 11:04 a.m. CST

Copy
Abdulkader Anwar gravatar
HI there, > Got it fixed by enabling ***Include in SCIM extension: in the attribute***. then allow the attribute in Client scope > thanks for all your time and support @Michael.Schwartz @Mobarak Hosen.Shakil tropical regards, anwar

Post an answer