Need To Release emailAddress as NameID on Shib2 IDP

[Ullfig, Roberto Alfredo]

Remote SP (Citrix Online) is requiring this:

<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>

(btw is this a new format or old? We've never seen this before.)

Added this to resolver:

    <resolver:AttributeDefinition xsi:type="ad:Simple" id="emailAddress" sourceAttributeID="mail">
        <resolver:Dependency ref="MySQL" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" />
    </resolver:AttributeDefinition>

And released it to the SP in filters. What else would I need to do? Since this is a NameID it needs some extra configuration right? Thanks!

---
Roberto Ullfig - rullfig at uic.edu
ACCC Research Programmer

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160830/ef6de673/attachment.html>