How can I get the Saml2SecurityToken.Assertion.Subject.NameId in the Subject form the testshib.org test server?

[W O]

Hi,

Thank you for your answer. For rd.dev I get:
 </ds:Signature>
   <saml2:Subject>
      <saml2:SubjectConfirmation
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
         <saml2:SubjectConfirmationData Address="46.243.26.58"
InResponseTo="_0b651836-f552-430c-90e4-e84e55d4eaa7"
NotOnOrAfter="2014-10-15T11:54:38.962Z" Recipient="
https://rp.dev/Auth/AssertionConsumerService"/>
      </saml2:SubjectConfirmation>
   </saml2:Subject>

I expect:

 <saml:Subject>
*      <saml:NameID
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">MyId</saml:NameID>*
      <saml:SubjectConfirmation
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <saml:SubjectConfirmationData Recipient="
https://rp.dev/Auth/AssertionConsumerService"
NotOnOrAfter="2014-10-15T09:59:04.791Z"
InResponseTo="_fd7d6fef-06a9-48d0-bce1-edd76657a328" />
      </saml:SubjectConfirmation>
    </saml:Subject>

Maybe my metadata is not correct to instruct the Testshib IDP.

In .NET is a class named public class Saml2SecurityToken : SecurityToken that
does all the 'work'. So if the right information is input, the output will
also be given. However, the input is missing het NameId.

You help is appreciated.

J.


2014-10-15 11:19 GMT+02:00 Peter Schober <peter.schober at univie.ac.at>:

> * W O <39a0d912abc at gmail.com> [2014-10-15 10:57]:
> > How can I get the Saml2SecurityToken.Assertion.Subject.NameId in the
> > Subject form the testshib.org test server? I get exceptions thrown if
> code
> > below is not uncommented.
>
> Logging into the Testshib SP from the Testshib IDP (using the
> credentials provided on its login page) and checking the IDP and SP
> logs, I just verified that the Testshib IDP does send a transient
> NameID in the assertion's Subject.
> (It also sends a persistent NameID wrapped in a SAML attribute as part
> of the AttributeStatement.)
> Feel free to check the Testhib IDP' logs yourself, that's why they're
> being made easily available via the web.
>
> How you access a NameID in custom .NET code (I'm guessing) is not an
> issue for the Shibboleth list or project.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141015/786a3e82/attachment-0001.html