PrincipalName as NameID?
Cantor, Scott
cantor.2 at osu.edu
Tue Jun 25 12:04:19 EDT 2013
>
>If I understand correct TransientId and PersistentId require a mail like
>format and because I am getting something that is just any string, I want
>to get in unspecified format.
That's all incorrect. Transient and Persistent are opaque values and have
precise definitions in SAML. Other formats are generally underspecified,
but exist for various syntaxes. And you can invent any format needed.
Unspecified should never be used under any circumstances.
>I don't understand why it keeps saying that it wants a transient format
>(Which I believe is what is stopping it from adding to nameId due to no
>mail format).
That would suggest that the changes you made weren't really made, or
haven't taken effect.
It's possible for an SP to explicitly request transient, but it isn't
common or likely.
-- Scott
More information about the users
mailing list