IdP: Returning emailAddress as NameId in SAMLResponse Assertion

[Cantor, Scott]

On 11/21/13, 9:42 AM, "Kevin P. Foote" <kpfoote at iup.edu> wrote:

>
>On Thu, 21 Nov 2013, Peter Schober wrote:
>
>> So if everything were as the OP said, it should Just Work.
>
>Well that must not be the case.. (surprise). Somehow Transient NameID is
>still 
>being used.
>
>If it were me I would not rely on the SP and thus create an explicit
>filter
>containing what I want to be released.. including what I want to be used
>as the NameID.

The precedence setting in the relying-party file is now probably the
cleanest way to ensure that.

But yes, factually what was posted is not possible or it would be working.

-- Scott