How can I get the Saml2SecurityToken.Assertion.Subject.NameId in the Subject form the testshib.org test server?

[Paul Hethmon]

The other point to understand is the format string of:

urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

Is not a format.

It is a way for an SP to convey to an IdP that they do not care what format they receive back. It does not have a meaning like persistent, transient, or email has.

Paul

On Oct 15, 2014, at 8:16 AM, Peter Schober <peter.schober at univie.ac.at<mailto:peter.schober at univie.ac.at>> wrote:

<saml:Subject>
*      <saml:NameID
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">MyId</saml:NameID>*

Testshib only announces support for transient NameIDs, as you can see
in the Testshib IDP's metadata.  If you're requesting something else
in your SAML2.0 authentication request (my reading of your "I expect"
above) that would explain the absence of the NameID in your case, but
its presence in other cases (like in my test with the Testshib SP).

So stop requesting a NameID format the IDP does not state it supports,
I would expect that to make a difference.

Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141015/04f407e6/attachment.html