question on nameFormat
Peter Schober
peter.schober at univie.ac.at
Thu Apr 4 10:58:31 EDT 2013
* Sam Jacob <skjacob at gmail.com> [2013-04-04 16:11]:
> in the NativeSPAttributeExtractor documentation it says " The
> nameFormat property
> can be omitted unless a non-standard non-URI-based NameFormat is being used"
>
> what's a non-standard non-URI?
The standard (SAML Core) defines 'NameFormat' to be "A URI ..." so
simply any NameFormat value that's not a URI is non-standard.
> <saml:Attribute Name="userId"
> NameFormat="urn:oasis:names:tc:SAML:2.0:assertion"><saml:AttributeValue
> xsi:type="xs:string">144822</saml:AttributeValue></saml:Attribute>
>From 8.2 (SAML Core) it seems this is an illegal NameFormat value.
So I'd say the software that's sending this is Doing It Wrong.
-peter
More information about the users
mailing list