Need To Release emailAddress as NameID on Shib2 IDP

[Andrew Morgan]

On Tue, 30 Aug 2016, Ullfig, Roberto Alfredo wrote:

> Remote SP (Citrix Online) is requiring this:
>
> <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
>
> (btw is this a new format or old? We've never seen this before.)
>
> Added this to resolver:
>
>    <resolver:AttributeDefinition xsi:type="ad:Simple" id="emailAddress" sourceAttributeID="mail">
>        <resolver:Dependency ref="MySQL" />
>        <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" />
>    </resolver:AttributeDefinition>
>
> And released it to the SP in filters. What else would I need to do? 
> Since this is a NameID it needs some extra configuration right? Thanks!

Are you running IDPv2 or IDPv3 with the legacy nameID generation?  The new 
IDPv3 configuration does not work as you describe above.

 	Andy