Correct attribute to filter

[Cantor, Scott]

On 8/26/14, 1:29 PM, "Michael Dahlberg" <olgamirth at gmail.com> wrote:
>
>Is there any way I can create an attribute like the transientId that will
>include 'NAME_ID' (not sure what that is) that I can then pass to the SP
>with a consistent, easily recognizable value?

Yes.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier

There are no standard formats for SAML NameIDs that are good identifiers
for users except for the persistent format, which is opaque and pairwise,
different for every SP. Deploying that requires a database, or a stable
underlying seed attribute.

>  Or am I approaching this in the wrong manner?

Probably (most use SAML Attributes instead of subject identifiers, and
generally use something like the eduPersonPrincipalName attribute which is
common in higher ed), but the vendor's application may be broken and not
support SAML well. You may have to supply a custom or proprietary NameID
to satisfy it. They have to document that so you know what you have to
supply.

-- Scott