IDP-initiaded SSO or IdPUnsolicitedSSO

[Peter Schober]

* Jehan Procaccia <Jehan.Procaccia at it-sudparis.eu> [2013-10-18 16:01]:
> I still want to send my email address as the NameIdentifier for that
> SP, not the default transientId, how can I force my shibboleth IDP
> to do so ?

Undo what you did so far with regard to NameIDs and start with the
documentation:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier
More specifically, with a complete example to follow:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPCustomNameIdentifier

I.e., create a new attribute defintion, use whatever data you want as
sourceAttributeID (e.g. "email"), adjust the dependency to match the
dataconnector the sourceAttributeID comes from, and use the rest of
the example pretty much verbatim.

Then release that attribute to the SP in question, as in the example,
also adding a DenyValueRule for transientId to that same
AttributeFilterPolicy.

That's all there is to it.
-peter