IdP 2.4 and Okta/Adobe.com SSO

[Nate Klingenstein]

Kathy,

I’ll bet that Okta is acting as an IdP proxy here: an SP to us and an IdP to Adobe.  From what I understand, Okta typically thinks of themselves as your IdP, provisioned from your user stores asynchronously.

I’d see if that’s the case before I spent too much time chasing this — or, here, debugging something that might not be part of the transaction at all.

Hope this helps,
Nate.

On Aug 31, 2015, at 12:21 PM, Kathy E. Wright <kewrig at clemson.edu<mailto:kewrig at clemson.edu>> wrote:

Thank you very much.  Adobe has insisted that the NameID format be "uspecified."  I see yours is persistent:

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150831/afa4e8de/attachment.html>