allowCreate false on authnRequest

[Rudy Bruns]

Hello,

We are using Shibboleth as a SP using an external IDP. This IDP uses a persistent NameIDFormat. We want the SP to sent an AuthnRequest with the allowCreate property set to "false" instead of "true". So instead of:

<saml2p:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" SPNameQualifier="https://my.sp.com/SAML/v2.0/"/>

We want shibboleth to create a request saying

<saml2p:NameIDPolicy AllowCreate="false" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" SPNameQualifier="https://my.sp.com/SAML/v2.0/"/>

Where can we configure this? Can we configure this?

Regards,
Rudy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140115/cee3bd3c/attachment.html