Making urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified a supportable identifier format
Alain O'Dea
alain.odea at gmail.com
Thu Jun 11 21:30:05 EDT 2015
On 11 June 2015 at 22:47, Peter Schober <peter.schober at univie.ac.at> wrote:
> * Alain O'Dea <alain.odea at gmail.com> [2015-06-12 03:09]:
> > Request specified use of an unsupportable identifier format:
> > urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified
> >
> > If I hack the format I get NameID values I can't use. I need the email
> > address on the SP.
>
> Then use the appropriate NameID format for email addresses.
> Clearly you don't want unspecified, as you specifically want the email
> address there.
> -peter
Thank you Peter.
I changed the SP to request
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress as mentioned in the
SAML 2.0 spec line 3285 and I get the following:
WARN [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:337] -
Profile Action AddNameIDToSubjects: Request specified use of an
unsupportable identifier format:
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150611/6ed1c197/attachment.html>
More information about the users
mailing list