IdP 3.1/Emailaddress in nameid

[Marvin Addison]

>
> the SP's metadata should include an NameIDFormat element with the Format
> it wants to get.
>

Specifying nameIDPrecedence on the RP was the only mechanism that worked
for me. I have an SP that needs unspecified, and despite the desired format
appearing in both the metadata

<EntityDescriptor entityID="https://foo.cc.vt.edu/sites.html/content">
  <SPSSODescriptor protocolSupportEnumeration="
      urn:oasis:names:tc:SAML:2.0:protocol
      urn:oasis:names:tc:SAML:1.1:protocol"
      AuthnRequestsSigned="false"
      WantAssertionsSigned="true">

<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>...

and the AuthnRequest

<samlp:AuthnRequest...>
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
https://foo.cc.vt.edu/sites.html/content</saml:Issuer>
    <samlp:NameIDPolicy AllowCreate="true"
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/>
</samlp:AuthnRequest>

the IdP is still sending the default NameID format. When I explicitly set
the precedence with unspecified first in an override for that particular
entity, it works as desired.

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150410/c1b0d648/attachment.html