PrincipalName as NameID?

[Cantor, Scott]

On 6/25/13 12:26 PM, "Byte Flinger" <byteflinger at gmail.com> wrote:
>
>If I understand correctly from the documentation, nameID definitions on
>the SP or IDP metadata are just for info and don't really make a
>difference is that correct?

No. The wiki describes the NameID format selection process, and both of
the metadata instances can impact that. Neither is strictly normative or
impossible to ignore, but they can affect the outcome.

>So basically what you guys are saying is that other than the use of
>unspecified instead of transient or persistent, what I am doing is
>correct?

Pretty much.

>Lastly, if one should not use unspecified then how does one get an
>unspecified NameID like in the google example from the wiki, or is that
>example just plain wrong?

Google uses unspecified, that just doesn't happen to be sensible.

-- Scott