how to release uid as nameid

[Kevin Foote]

On 3/20/14, 1:17 PM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* David Bantz <dabantz at alaska.edu> [2014-03-20 21:13]:
>> If the vendor requires it as the subject of the SAML assertion (as
>>suggested by <saml:subject>... <saml:nameid>yqian</saml:nameid>Š),
>> that¹s different than an attribute in the attribute portion of the
>>assertion.
>
>No, NameIDs still need to be released via the attribute-filter.
>(I.e., there is no corresponding nameid-filter.xml)

So to expound on Peter¹s statement a bit.

You do have to have a release filter configured to release the uid to the
RP. The IdP will then (assuming the uid attribute has the proper encoding)
place the uid in a list of available data to use as the NameID. The IdP
will then pick from that list randomly or how ever you have told it to
with regard to a specific RP.

------
thanks,
 kevin.foote


PS.. maybe nameid-filter.xml can be on the v4 wish list :-P