Add ability to strip domain/realm per provider

This allows to return (hopefully) the same name whether the user
authenticated via ESSO or form based authentication.

Crude for now, may be augmented with some regex configuration in the future.

Signed-off-by: Simo Sorce <simo@redhat.com>

1 files changed, 5 insertions, 0 deletions

diff --git a/ipsilon/providers/saml2/provider.py b/ipsilon/providers/saml2/provider.py
index c738ac2..acf2ee7 100755
--- a/ipsilon/providers/saml2/provider.py
+++ b/ipsilon/providers/saml2/provider.py
@@ -106,3 +106,8 @@ class ServiceProvider(object):
     def _debug(self, fact):
         if cherrypy.config.get('debug', False):
             cherrypy.log(fact)
+
+    def normalize_username(self, username):
+        if 'strip domain' in self._properties:
+            return username.split('@', 1)[0]
+        return username