correct nameid-format

[Cantor, Scott]

> Would "nameid-format:emailAddress" be significantly different from
> "nameid-format:persistent"?

Aside from them being different formats, you cannot legally pass an email address as a "persistent" NameID on the wire without violating the precise semantics required by "persistent".

In other words, it's inappropriate to add such an encoder to an attribute definition that's producing an email address.

Also:

>         <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID"
> nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress"

There is no such format constant, the format constants from 1.1 like emailAddress do not change value based on the version of the protocol used.

> I thought that if I released the nameid in the form of an email address that I
> wouldn't need to release any other attributes.

That depends entirely on the SP. You can't do it in a vacuum without know the technical requirements you have to meet.

-- Scott