overriding transient / persistent nameid values in IdP v3

[Cantor, Scott]

On 9/8/15, 4:24 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

>I have a couple of SPs that are (IMHO) improperly requesting that we send the user's name or email along as transient or persistent name ids.

That would be horrendous.

>Can I override them using SAML(1|2)AttributeSourcedGenerator in IdPv3?

The earlier generators would run first. I guess you could reorder them and enable the broken one for that SP alone, that probably wouldn't affect anything else. But I certainly wouldn't swear to it.

-- Scott