NameIDFormat in SP metadata

[Cantor, Scott]

On 9/21/12 11:33 AM, "Grady, Michael Allen" <m-grady at illinois.edu> wrote:
>>
>Then it might be useful to consider changing the "advice" in the wiki
>page:
>
>  
>https://wiki.shibboleth.net/confluence/display/SHIB2/IdPCustomNameIdentifi
>er
>
>which highlights the following:
>
>"The nameFormat choice is essentially arbitrary. SAML defines a few
>poorly specified options for some common syntaxes like email addresses or
>distinguished names, but in many cases the best choice is to use the
>"unspecified" option as above, or invent one you control."
>
>From these comments, it sounds like "unspecified" is NOT actually a good
>choice.

The advice wasn't really written with the use of SP metadata in mind,
because that's not very common, but I reworded it a bit. I also verified
that the unspecified format is in fact a wildcard in the selection
process, and I documented that in the selection rules.

-- Scott