a simple recipe for copying attribute into Subject/NameID

[Cantor, Scott]

On 6/28/13 8:45 PM, "Jason Winshell" <jason at jasonwinshell.com> wrote:
>
>I am using OIOSAML as my service provider. I need my NameID policy to
>X509Subject to work for my specific purpose. So far I've had to set it to
>transient to get Shibboleth to not produce an error about an unsupported
>NameID policy.

I rather suspect that if that's the case, the SP is specifically
requesting a transient format NameID in its request, in which case there's
nothing you can do that's going to fix this. You can't make the IdP behave
incorrectly. If you don't supply a transient format out of the
resolver/encoding process, then it must fail the authentication request.

-- Scott