IdP: Returning emailAddress as NameId in SAMLResponse Assertion

[Kevin P. Foote]

On Thu, 21 Nov 2013, Peter Schober wrote:

> So if everything were as the OP said, it should Just Work.

Well that must not be the case.. (surprise). Somehow Transient NameID is still 
being used.

If it were me I would not rely on the SP and thus create an explicit filter
containing what I want to be released.. including what I want to be used
as the NameID.

------
thanks
  kevin.foote