Shibboleth idp v3 unspecified NAMEIDFORMAT

[Klingenstein, Nate]

Paul,

The developers are of the opinion that specification of "unspecified" is inherently a little silly, so the code base has actually been engineered to make it harder to use unspecified than any other name ID format in the world.

Please start with this documentation:

https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration#CustomNameIDGenerationConfiguration-Dealingwith"Unspecified"

Basically, the metadata is not enough to signal the IdP to use it.  You'll need to add an explicit rule, or change to a format that is specified.

If it leaves you with questions, we're here to help.

Take care,
Nate.

> On Aug 24, 2016, at 12:59 PM, Lueders, Paul T CIV (US) <paul.t.lueders.civ at mail.mil> wrote:
> 
> I have an sp metadata file whos nameidformat is unspecified and I am not able to authenticate the users to the application associated with the fautly sp.
> Does shibboleth idp allow the nameid of unspecified?  If not how would I correct this error?
> 
> Thanks
> Paul
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net