[Marketing Mail] Re: IdP: Returning NameId encrypted in SAMLResponse Assertion

[Qian, Yi]

1.  have a deny policy to not release transient ID
2.  new definition for username in resolver the username not as string, but nameid
3.  release this username to SP
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Suresh Babu
Sent: Tuesday, October 28, 2014 2:29 AM
To: Shib Users
Subject: RE: [Marketing Mail] Re: IdP: Returning NameId encrypted in SAMLResponse Assertion

Can you help me with brief configurations ?

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Thursday, October 23, 2014 10:04 PM
To: users at shibboleth.net
Subject: [Marketing Mail] Re: IdP: Returning NameId encrypted in SAMLResponse Assertion

* Suresh Babu <Suresh.Babu at ibsplc.com> [2014-10-23 11:09]:
> <saml2:NameID
> Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
> NameQualifier="https://b1035.ibsplc.com:8443/idp/shibboleth">_c6c2e2ea
> 8bc2cbce298ebf895721bdf7</saml2:NameID>

If this is what you're getting, it's not encrypted. It's a transient NameID for which you changed the format to make it unclear what it's supposed to be for the recipient.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


DISCLAIMER: "The information in this e-mail and any attachment is intended only for the person to whom it is addressed and may contain confidential and/or privileged material. If you have received this e-mail in error, kindly contact the sender and destroy all copies of the original communication. IBS makes no warranty, express or implied, nor guarantees the accuracy, adequacy or completeness of the information contained in this email or any attachment and is not liable for any errors, defects, omissions, viruses or for resultant loss or damage, if any, direct or indirect."
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net