[JIRA] (IDP-2003) Support generating a NameID to put into the Subject in the AuthnRequest it issues

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-2003 ( https://shibboleth.atlassian.net/browse/IDP-2003?atlOrigin=eyJpIjoiOTg5Njc4ZjU1YTI5NGEyNGFkZWIzNDY1MWQ0MzFmZmQiLCJwIjoiaiJ9 )

Re: Support generating a NameID to put into the Subject in the AuthnRequest it issues ( https://shibboleth.atlassian.net/browse/IDP-2003?atlOrigin=eyJpIjoiOTg5Njc4ZjU1YTI5NGEyNGFkZWIzNDY1MWQ0MzFmZmQiLCJwIjoiaiJ9 )

Getting the principal works exactly the same, the problem obviously as you note is that you can’t do anything with it because you have to produce a NameID out of it, and that isn’t necessarily just the value you would get from the same places.

I’ll at least look at this for 4.3, but my caution here is that to do this the implication on the other IdP is that the response MUST issue an assertion about that actual principal, and I know for a fact that most of the places people are doing this are NOT being handled that way. The SP (in this case, us) can’t actually enforce that, so what we’re doing is facilitating abuse of the standard and we don’t like doing that as a general rule.

( https://shibboleth.atlassian.net/browse/IDP-2003#add-comment?atlOrigin=eyJpIjoiOTg5Njc4ZjU1YTI5NGEyNGFkZWIzNDY1MWQ0MzFmZmQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2003#add-comment?atlOrigin=eyJpIjoiOTg5Njc4ZjU1YTI5NGEyNGFkZWIzNDY1MWQ0MzFmZmQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:3ac329d )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220902/743019c9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-39235bf9-3f19-4484-b219-8ce07b6daf93
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220902/743019c9/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-ba51b4d2-aab3-49e2-8e77-d80fff688b97
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220902/743019c9/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-b6129b2d-f206-47fa-a086-9e42f256934f
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220902/743019c9/attachment-0005.png>