How do I send Subject->NameID in "clear" text

[Jason Holland]

That did the trick! Thanks for the help Christopher and Scott!

<resolver:AttributeDefinition
  id="commPortalPhone"
  xsi:type="ad:Simple"
  sourceAttributeID="commPortalPhone"
  xmlns="urn:mace:shibboleth:2.0:resolver:ad">
    <resolver:Dependency ref="staticAttributes" />
    <resolver:AttributeEncoder
      xsi:type="enc:SAML1StringNameIdentifier"
      xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
      nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
/>
    <resolver:AttributeEncoder
      xsi:type="enc:SAML2StringNameID"
      xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
      nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
/>
</resolver:AttributeDefinition>

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Christopher Bongaarts
Sent: Wednesday, December 28, 2011 3:22 PM
To: users at shibboleth.net
Subject: Re: How do I send Subject->NameID in "clear" text

On 12/28/2011 3:06 PM, Jason Holland wrote:

> I went back and scoured the documentation and followed it to the best 
> of my ability and I think I created a bug or found a bug or screwed 
> something up even more. For the NameID (which I have "9185551212"
> hard-coded in a static attribute) I'm getting something like this 
> "org.opensaml.saml2.core.impl.NameIDImpl at 9403a3" where the 
> alphanumeric code after the @ sign changes at each login test I do.
> $IDPHOME/conf/attribute-resolver.xml
> ======================================================================
> <resolver:AttributeDefinition
>    xsi:type="SAML2NameID"

I think you want the Simple xsi:type, not the SAML2NameID type here. 
The Encoder is what makes it a NameID on the way out, not the type.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net