SAML Salesforce Reponse coming in Transient Format

[Cantor, Scott]

On 11/13/15, 3:14 PM, "users on behalf of Cahill, Charles (GE Appliances)" <users-bounces at shibboleth.net on behalf of Charles.Cahill at ge.com> wrote:



>I am still really confused on this.  I changed the nameid-format to persistent, but it
>is still coming back in the saml response as transient.

I don't know what that means or what you changed.

There is configuration for generating NameIDs in various formats as required, and then you have machinery in various places that controls the selection of the format, principally the SP's metadata.

Beyond that it depends on the version.

V3
https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration

V2 (much harder to follow, but that's what you get for running code a year or more out of date)
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier

-- Scott