release Name ID as an attribute

[Qian, Yi]

Thanks, Scott, that is probably why I did not find how to release Name ID as attribute in wiki, I am having web meeting with them today, I will see if I can push back, the problem is the people from success factor are project managers who literally have no knowledge about saml and they always blame on our side

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, September 25, 2014 11:07 AM
To: Shib Users
Subject: Re: release Name ID as an attribute

On 9/25/14, 12:01 PM, "Qian, Yi" <yqian at ku.edu> wrote:

>Hello,
> 
>The question is can Shibboleth IdP release NameID in the saml subject 
>and attributes at the same time? My impression is I cannot do that 
>after looked at the shib wiki.

Yes, you can, but you shouldn't.

> 
>The reason is success factor sent us sample saml response which they 
>has NameID in both places
> 
>               <saml2:Attribute Name="NameID"
>NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
>                  
><saml2:AttributeValue>161720</saml2:AttributeValue>
>               </saml2:Attribute>

That's complete nonsense anyway.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net