Shibboleth 2.5 NameID format element

[Hotra, Jason M.]

Good day,
I have installed and configured the Shibboleth 2.5 SP and successfully
authenticated to my required IdP on their pre-production environment.
We are now moving to their production environment and I have been asked
why the NameID format element is not part of the SAML request.  I have
searched everywhere I can think of and cannot figure out where to
specify the NameID format within the configuration of the SP.  Here is
the SAML request:

 

<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"

 
AssertionConsumerServiceURL="https://my.test.com/Shibboleth.sso/SAML2/PO
ST"

 
Destination="https://some.IDP.com:443//SSORedirect/metaAlias/idp
<https://some.IDP.com:443/SSORedirect/metaAlias/idp> "

                    ID="_c55077c10e20d860d4e8871ef6d49c21"

                    IssueInstant="2012-09-19T13:12:53Z"

 
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

                    Version="2.0"

                    >

    <saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://my.test.com</
saml:Issuer <https://my.test.com%3c/saml:Issuer> >

    <samlp:NameIDPolicy AllowCreate="1" />

</samlp:AuthnRequest>

 

I added the following to the attribute-map.xml, but nothing was added to
the generated SAML request as seen above.

 

   <Attribute
name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
id="persistent-id">

        <AttributeDecoder xsi:type="NameIDAttributeDecoder"
formatter="$NameQualifier!$SPNameQualifier!$Name"
defaultQualifiers="true"/>

    </Attribute>

 

 

Any help would be greatly appreciated.

 

Thanks,

 

Jason 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120919/b27de711/attachment.html