problems seemingly caused by transientID in O365

[Cantor, Scott]

On 8/27/14, 7:57 AM, "Rob Gorrell" <rwgorrel at uncg.edu> wrote:
>
>My question is, why is the transientID being released? Is it a case of
>first match wins in policy processing order instead of most restrictive?
>If that is so, I could use a little help on the XML, how can I modify the
>transientID release to include multiple
> basic:NOT conditions (to not release to Google AND Microsoft)?

Save yourself the hassle. Don't use the filter to control NameID format,
use a precedence setting in relying-party.xml or just specify the format
in the SP's metadata.

We fixed this years ago now precisely because it's so awkward to do this
in the filter.

-- Scott