Need To Release emailAddress as NameID on Shib2 IDP

[Cantor, Scott]

On 8/30/16, 1:32 PM, "users on behalf of Ullfig, Roberto Alfredo" <users-bounces at shibboleth.net on behalf of rullfig at uic.edu> wrote:

>    Remote SP (Citrix Online) is requiring this:    
>    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameidformat:emailAddress</md:NameIDFormat>
> (btw is this a new format or old? We’ve never seen this before.)

That's been a standard format in SAML since SAML 1.1 (as you can guess from the URI).

>    And released it to the SP in filters. What else would I need to do? Since this is a
> NameID it needs some extra configuration right? Thanks!

NameID Format selection:

- requested by SP via NameIDPolicy in its AuthnRequest
- specified in SP's metadata via NameIDFormat element
- set in relying-party override via nameIDFormatPrecedence property

That's it.

Same in V3.

-- Scott