[
https://issues.apache.org/jira/browse/KNOX-2764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17556388#comment-17556388
]
Attila Magyar commented on KNOX-2764:
-------------------------------------
{code}
Index: trunk/books/2.0.0/config_pac4j_provider.md
===================================================================
--- trunk/books/2.0.0/config_pac4j_provider.md (revision 1902099)
+++ trunk/books/2.0.0/config_pac4j_provider.md (working copy)
@@ -121,6 +121,14 @@
NOTE: This is NOT a secure mechanism and must NOT be used in production
deployments.
+
+By default Knox will accept the subject of the returned UserProfile and pass
it as the PrimaryPrincipal to the proxied service. If you want to use a
different user attribute, you can set the UserProfile attribute name as
configuration parameter called pac4j.id_attribute.
+
+ <param>
+ <name>pac4j.id_attribute</name>
+ <value>nickname</value>
+ </param>
+
Otherwise, you can use Facebook, Twitter, a CAS server, a SAML IdP or an
OpenID Connect provider by using the following parameters:
{code}
> Document pac4j.id_attribute usage
> ---------------------------------
>
> Key: KNOX-2764
> URL: https://issues.apache.org/jira/browse/KNOX-2764
> Project: Apache Knox
> Issue Type: Bug
> Reporter: Attila Magyar
> Assignee: Attila Magyar
> Priority: Major
>
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
