Hi,Currently Knox supports username in http header with key SMUSER (which is 
configurable). 
I'm wandering how can we support email address in place of user name. In other 
words, in my use-case, preauth filter gets the email address as header, can we 
parse the email address to get the username/principal name?
I was considering two options:
1. Extending current functionality of HeaderPreAuthFederationFilter to support 
email address as well. That means if SMUSER is null, check for email address 
and then parse to get the principal name.
2. In HeaderPreAuthContributor class, set the "PREAUTH_FILTER_CLASSNAME" from 
configuration. Currently it is always assigned to 
"HeaderPreAuthFederationFilter". I believe this approach is 
extendable/pluggable.
What do you guys think?
Based on your suggestion, I can start working on it.
Regards,Mohammad 

Reply via email to