How do I send Subject->NameID in "clear" text

[Cantor, Scott]

On 12/23/11 4:53 PM, "Jason Holland" <jholland at olp.net> wrote:

>I am trying to get my Shib IdP to work with an SP that requires a phone
>number instead of the username used to authenticate. I think I have it
>setup to send the phone number instead of the username because I can see
>the debug logs are saying that Shib is using the phone for the NameID.

You don't have to send it in the NameID unless the SP for some reason is
badly broken and doesn't handle attributes at all. I mean, you can, but
it's pretty weird to put a phone number there.

>The SP has an example response where the NameID is in clear, human
>readable text so my question is what setting do I change to make it to
>where Shib sends the NameId as "clear" text in the response. I can't
>find any documentation on this. Any hints?

Are you talking about encryption? If you want to change the encryption
settings, they're in the RelyingParty's profile handler for SSO. I don't
think the NameID gets encrypted by default anymore, not for a long time.

-- Scott