Release NameID as UID

[Johan Åkerstrøm]

I know, I've seen the discussion here before but I don't have a choice. The vendors SP assumes NameID to be the same as uid and format to be undefined.
This is how it is and this is how it will be, and I need to get Shibboleth working with this and at the moment I am failing.

I've seen several threads about this, tried multiple things but can't get it going.

So this is my current config, probably a bit screwed up now but I get more confused by the minute now, so need som help:

Attributre-resolver-ldap.xml:
<resolver:AttributeDefinition
                        id="customId"
                        xsi:type="Simple"
                        sourceAttributeID="uid"
                        xmlns="urn:mace:shibboleth:2.0:resolver:ad">
                <resolver:Dependency
                        ref="eDirectory" />
                <resolver:AttributeEncoder
                                xsi:type="SAML1StringNameIdentifier"
                                xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                                nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
                <resolver:AttributeEncoder
                                xsi:type="SAML2StringNameID"
                                xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                                nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
        </resolver:AttributeDefinition>

Attribute-filter.xml:

        <afp:AttributeRule attributeID="customId">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

Saml-NameID.xml:
     <util:list id="shibboleth.SAML2NameIDGenerators">
        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
            p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:undefined"
            p:attributeSourceIds="#{ {'customId'} }" />
    </util:list>

Saml-NameID.properties:
idp.persistentId.generator = shibboleth.ComputedPersistentIdGenerator
idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:transient
idp.nameid.saml1.default = urn:mace:shibboleth:1.0:nameIdentifier
idp.persistentId.generator = null
idp.persistentId.sourceAttribute = customId
idp.persistentId.salt = q7Gb2Jq9
idp.persistentId.algorithm = SHA




Best Regards, Johan Åkerstrøm

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150903/4c69eec1/attachment.html>