question regarding status:InvalidNameIDPolicy message

[Peter Schober]

* David Massie <dhm24 at georgetown.edu> [2012-04-04 21:40]:
> <saml2p:StatusCode
> Value="urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy"/>
>        </saml2p:StatusCode><saml2p:StatusMessage>NameID Format not
> supported: urn:oasis:names:tc:SAML:2.0:nameid-format:transient
> </saml2p:StatusMessage>

Looks like you changed your IdP config to remove support for transient
NameIDs.

>  <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
>     xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>     nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />

Well, that one's encoded in a different name format than what seems to
be required, guessing from the authN request that will have triggered
the error message above.
-peter