IdP Initiated SSO

[Michael Dahlberg]

On Wed, Aug 31, 2016 at 1:18 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/31/16, 1:08 PM, "users on behalf of Michael Dahlberg" <
> users-bounces at shibboleth.net on behalf of olgamirth at gmail.com> wrote:
>
> >    On a related note, is the option to encrypt/not encrypt the nameID
> different when using
> > Unsolicited SSO?
>
> Nope.
>
> >  The reason I ask is because in the bean for this entityId in the
> relying-party file, I
> > have the following line:
>
> That's the default, so there's no reason to do that.
>
> >    Unfortunately, the nameId looks like its still being encrypted
>
> I can guarantee you it's not. Transient IDs are not encrypted, they're
> simply not readable.
>
>
>
My apologies; its actually a persistent ID.  Does that make a difference?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160831/8ba18995/attachment.html>