Multiple Attributes Released that can be encoded as NameID's in IdP v2.4.3

[IAM David Bantz]

On Tue, Oct 27, 2015 at 11:42 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> >In my (I think typical) case, there are multiple attributes with the
> "right" nameIDFormat or nameFormat.
>
> Then one or more of the SPs have forced you to break your system. By
> definition a given Format is not meant to refer to different data just
> based on who's asking. That's the entire point of a Format.
>

I'm sorry I don't follow Scott.  The default eduPersonTargetedID resolver
has nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" as
well.  How or why is it "broken" to configure the IdP to send a different
(not "targeted") ID in the Subject to one or more SPs ?

David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151027/d2f18bbf/attachment.html>