Setting "Format" attribute in NameIDPolicy of AuthnRequest.

[Tom Scavo]

On Wed, May 14, 2014 at 6:36 PM, Kevin Foote <kpfoote at uoregon.edu> wrote:
>
> On May 14, 2014, at 3:22 PM, Emilio Penna <emilio.penna at seciu.edu.uy> wrote:
>
>> Hello, I'm starting with Shibboleth SP (version 2.5.3). Shibboleth SP is
>> generating AuthnRequest with
>>
>> <samlp:NameIDPolicy AllowCreate="1" />
>>
>> It works, and the IdP responds with a persistent identifier, but I need
>> the emailAddress as NameID…
>
> As an SP you can request a NameID type but you can not guarantee that the IdP will
> give it to you.

I don't think so. The SAML spec is pretty clear on that. It's a MUST in fact.

Tom