NameID Format

[Cantor, Scott]

On 9/30/15, 3:53 PM, "users on behalf of Michael Dahlberg" <users-bounces at shibboleth.net on behalf of olgamirth at gmail.com> wrote:

>My reading of this is that when I release the attribute "cnIdentifiedName" that the "commonName" attribute retrieved from our LDAP server will be SAML2 encoded and released in the Subject NameID field.

If that Format is selected. If the SP doesn't tell it anything, the metadata doesn't tell it anything, and you don't tell it anything, then what gets selected is the same as always.

The selection process is documented [1]. I don't know why it's so confusing, you can probably help with that.

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/SHIB2/IdPNameIdentifier (bottom of page)