nameID question

[Mike Flynn]

Yeah I have been up and running for years with it - just trying to broaden my understanding is all :)


________________________________
 From: Kevin P. Foote <kpfoote at iup.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, September 20, 2013 8:21 AM
Subject: Re: nameID question
 


On Fri, 20 Sep 2013, Mike Flynn wrote:

> I have looked at the WIKI for this but I am still not 100% clear on it.  I currently have no iDPs that connect to my SP that require the use of this.  Not to say that will not change though.  Is the use of this fairly uncommon?  If someone wants to pass this to me would they have to hit one of the NIM endpoints?


You are getting name identifiers on the assertions you receive.

You are probably getting the generic TransientId nameId from most IdPs.
Unless you specify, as a SP, that you want IdPs to send you something in
particular I would not worry about it.

Since you are up and running already you are probably doing most all
you need to do with the attributes you receive rather than relying on
the subject of the assertion to match your internal to app records.

------
thanks
  kevin.foote
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130920/7d3e64a1/attachment.html