nameID question

[Kevin P. Foote]

On Fri, 20 Sep 2013, Mike Flynn wrote:

> I have looked at the WIKI for this but I am still not 100% clear on it.  I currently have no iDPs that connect to my SP that require the use of this.  Not to say that will not change though.  Is the use of this fairly uncommon?  If someone wants to pass this to me would they have to hit one of the NIM endpoints?


You are getting name identifiers on the assertions you receive.

You are probably getting the generic TransientId nameId from most IdPs.
Unless you specify, as a SP, that you want IdPs to send you something in
particular I would not worry about it.

Since you are up and running already you are probably doing most all
you need to do with the attributes you receive rather than relying on
the subject of the assertion to match your internal to app records.

------
thanks
  kevin.foote