R: different assertions generated for WEB and ACTIVE clients

[Rowan Truscott]

Not sure why no one has picked this up but I think the issue
is that the SAML Request for the active client is using the
transient NameID format. A transient name ID is usually only
valid for the life of the session. Hence the _99... NameID below.

<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
NameQualifier="https://shibbidp.eduteamit.net/idp/shibboleth">
_9955833da857f2fa2b7915bd24982e1
8</saml2:NameID>


You could try adding this to your attribute-resolver.xml to force the
static GUID into the NameID for the transient format.

 <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-
format:transient" />
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130122/5819175f/attachment.html