question regarding status:InvalidNameIDPolicy message

[Christopher Bongaarts]

On 4/4/2012 2:46 PM, Peter Schober wrote:
> * David Massie<dhm24 at georgetown.edu>  [2012-04-04 21:40]:
>>   <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
>>      xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>>      nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
>
> Well, that one's encoded in a different name format than what seems to
> be required, guessing from the authN request that will have triggered
> the error message above.

In further support of this theory, we are sending a transient nameID to 
one45 with no problems.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%