NameIDFormat in SP metadata

[Christopher Bongaarts]

On 9/21/2012 5:11 AM, Peter Schober wrote:

> Btw, I still have a rule in my attribute filter supressing
> (DenyValueRule) the release of transientId for those RPs to which I
> release persistent NameIDs. I guess with proper metadata I could get
> rid of that,

This is what we do as well (default release for transientId, and deny it 
per-SP if we want to send something else as the nameID).

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%