Attribute Encoders and Subjects and NameID/NameIdentifier in IdP V3

[Cantor, Scott]

On 4/30/13 8:56 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:

>3) We introduce two new name encoders which are no-ops (just as the
>encoder
>in the first mechanism is) but which are used to create the identifier
>required in the <Subject> statement.

For a thought experiment, I'd like to suggest we think about simply
getting rid of the concept of a NameID encoder, and instead just require
that an attribute chosen for use as a NameID be, well, NameID-valued (or
NameIdentifier-valued for SAML 1).

That probably adds more attribute definitions, but it seems clearer to me.

-- Scott