{"action":"created","issue":{"url":"https://api.github.com/repos/KentorIT/authservices/issues/220","labels_url":"https://api.github.com/repos/KentorIT/authservices/issues/220/labels{/name}","comments_url":"https://api.github.com/repos/KentorIT/authservices/issues/220/comments","events_url":"https://api.github.com/repos/KentorIT/authservices/issues/220/events","html_url":"https://github.com/KentorIT/authservices/issues/220","id":66478110,"number":220,"title":"Is there a way to get the Subject/NameId element from an assertion","user":{"login":"martinjt","id":1699587,"avatar_url":"https://avatars.githubusercontent.com/u/1699587?v=3","gravatar_id":"","url":"https://api.github.com/users/martinjt","html_url":"https://github.com/martinjt","followers_url":"https://api.github.com/users/martinjt/followers","following_url":"https://api.github.com/users/martinjt/following{/other_user}","gists_url":"https://api.github.com/users/martinjt/gists{/gist_id}","starred_url":"https://api.github.com/users/martinjt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martinjt/subscriptions","organizations_url":"https://api.github.com/users/martinjt/orgs","repos_url":"https://api.github.com/users/martinjt/repos","events_url":"https://api.github.com/users/martinjt/events{/privacy}","received_events_url":"https://api.github.com/users/martinjt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-04-05T20:12:22Z","updated_at":"2015-04-05T23:23:47Z","closed_at":null,"body":"is this set against anything in the ClaimsIdentity? I was expecting it to the \"Actor\" of the ClaimsIdentity.  I'm no expert on SAML, or claims authentication, and I know that under the hood it's using the Saml2SecurityTokenHandler, so maybe it's a bug in my ADFS response?\r\n\r\nhere's the subject node...\r\n\r\n     <Subject>\r\n       <NameID Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified\">DOMAIN\\testuser</NameID> \r\n     <SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\">\r\n       <SubjectConfirmationData NotOnOrAfter=\"2015-04-05T19:12:27.395Z\" Recipient=\"https://testdomain.com/CustomSSO.aspx\" /> \r\n       </SubjectConfirmation>\r\n     </Subject>"},"comment":{"url":"https://api.github.com/repos/KentorIT/authservices/issues/comments/89868858","html_url":"https://github.com/KentorIT/authservices/issues/220#issuecomment-89868858","issue_url":"https://api.github.com/repos/KentorIT/authservices/issues/220","id":89868858,"user":{"login":"martinjt","id":1699587,"avatar_url":"https://avatars.githubusercontent.com/u/1699587?v=3","gravatar_id":"","url":"https://api.github.com/users/martinjt","html_url":"https://github.com/martinjt","followers_url":"https://api.github.com/users/martinjt/followers","following_url":"https://api.github.com/users/martinjt/following{/other_user}","gists_url":"https://api.github.com/users/martinjt/gists{/gist_id}","starred_url":"https://api.github.com/users/martinjt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martinjt/subscriptions","organizations_url":"https://api.github.com/users/martinjt/orgs","repos_url":"https://api.github.com/users/martinjt/repos","events_url":"https://api.github.com/users/martinjt/events{/privacy}","received_events_url":"https://api.github.com/users/martinjt/received_events","type":"User","site_admin":false},"created_at":"2015-04-05T23:23:47Z","updated_at":"2015-04-05T23:23:47Z","body":"@albinsunnanbo the segment I've shown is what is provided from ADFS, I don't have control of the namespaces.  I suppose what we're saying is that Kentor can't support putting the Actor as the NameID when it comes from ADFS?"}}