release attribute not in saml response

[Cantor, Scott]

On 6/21/13 11:43 PM, "Qian, Yi" <yqian at ku.edu> wrote:

>But in the idp-process log, the saml response send back to salesforce
>does not have this EppnNameID, it does include User.IsActive and other
>attributes that release to every SP, such as eppa etc.

Assuming it's using a transient NameID instead, you need to review the
documentation on NameID selection logic in the IdPNameIdentifier topic and
use one of the many options available to control the format chosen for the
subject.

-- Scott