How do I send Subject->NameID in "clear" text
Cantor, Scott
cantor.2 at osu.edu
Tue Dec 27 20:16:31 GMT 2011
On 12/27/11 3:05 PM, "Jason Holland" <jholland at olp.net> wrote:
>My ProfileConfiguration has encryptNameIds set to "never" so maybe I'm
>making an amateur mistake with my configuration. To make it as simple as
>possible I hard-coded a phone number in a static attribute and it is
>still not being put in clear text in the response.
It's not there at all. The attribute being chosen for inclusion is the
transient identifier, that's not your phone number.
You cannot use the transient Format for your own purposes. You have to
define a custom Format, and you have to ensure that that's the value used
either via metadata (NameIDFormat), precedence rules in relying-party.xml,
or attribute filtering.
-- Scott
More information about the users
mailing list