IdP v2 to v3 migration success story

[Paul Engle]

On 7/1/2015 9:28 AM, Cantor, Scott wrote:
> I would also need to see the list of formats you had in the metadata. If you had "unspecified" in there, that won't work, and the logging for that should probably be turned up to info at least, or possibly warn.
> 
> -- Scott
> 

Here's what I had. I don't remember how I originally came up with it. As
I said, it was my first wonky integration, and I was still trying to
figure things out. I suspect I just copied a block from other metadata
that I knew worked and stuck the new emailAddress format at the top.


<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>

<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>

<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>

<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>


  -paul

-- 
Paul D. Engle              |  Rice University
Systems Administrator III  |  Information Technology - MS119
(713)348-4702              |  PO Box 1892
pengle at rice.edu            |  Houston, TX 77252-1892