env IDP_PROVIDED_USER_IDENTIFIER_NAME

Author: lucidprogrammer

src/SamlIdentity.php

@@ -43,7 +43,11 @@ public static function findIdentity($id)
     {
       $attributes = Yii::$container->get('saml')->getAttributes();
       if(sizeof($attributes) > 0){
-        $id = $attributes['username'][0];
+        $id = mt_rand();
+        $uniqueIdentifierFromIdp = getenv('IDP_PROVIDED_USER_IDENTIFIER_NAME') ? getenv('IDP_PROVIDED_USER_IDENTIFIER_NAME') : '';
+        if($uniqueIdentifierFromIdp){
+          $id = $attributes[$uniqueIdentifierFromIdp] && count($attributes[$uniqueIdentifierFromIdp])>0 ? $attributes[$uniqueIdentifierFromIdp][0] : $id;
+        }
         return new SamlIdentity($id,$attributes);
       }
       return null;

src/_SamlController.php

@@ -22,7 +22,12 @@ public function actionLogin(){
       Yii::$container->get('saml')->requireAuth();
     } else {
       $attributes = Yii::$container->get('saml')->getAttributes();
-      $id = $attributes['username'][0];
+      $id = mt_rand();
+      $uniqueIdentifierFromIdp = getenv('IDP_PROVIDED_USER_IDENTIFIER_NAME') ? getenv('IDP_PROVIDED_USER_IDENTIFIER_NAME') : '';
+      if($uniqueIdentifierFromIdp){
+        $id = $attributes[$uniqueIdentifierFromIdp] && count($attributes[$uniqueIdentifierFromIdp])>0 ? $attributes[$uniqueIdentifierFromIdp][0] : $id;
+      }
+
       Yii::$app->user->login(new SamlIdentity($id,$attributes), 0);
       $this->goBack();
     }