Release NameID as UID

[Cantor, Scott]

On 9/3/15, 5:44 PM, "users on behalf of Johan Åkerstrøm" <users-bounces at shibboleth.net on behalf of Johan.Akerstrom at skill.no> wrote:

>I’ve seen several threads about this, tried multiple things but can’t get it going.

Whatever you're following is *wrong*, so stop.

> 
>So this is my current config, probably a bit screwed up now but I get more confused by the minute now, so need som help:

All of that is outdated, that's 2.x material.

The email I sent outlining how to generate a custom identifier is here [1]. The same material is in the wiki, but slightly less explicitly. It is really not a big deal.

The only difference is that you're using "unspecified". Claiming that the SP "requires" that is not compelling evidence, so my advice to start with is that you configure something that isn't "unspecified" and if that works, great.

But if you must, the only difference is that you can't use the SP's metadata to trigger the result you need, you will have to create a RelyingParty override for that SP and specify the URN of the format you need in the nameIDFormatPrecedence property of the profile configuration(s) you add to the override.

It works. It is NOT hard.

If it doesn't work, STOP and ask and post a log snippet.

-- Scott

[1] http://marc.info/?l=shibboleth-users&m=143524088631467&w=2