Parsing vendor request/instruction for SAML SSO

[IAM David Bantz]

No one replied indicating Shibb integration with LeanKit, so I'm relying on
a terse description of their support for SSO.  No metadata or certificate
provided, only an ACS (without binding specified).  And this: "In the SAML
response, the “emailaddress” claim should be provided (SAML v2.0,
nameid-format:unspecified)"

I read that as requiring the SAML Subject is the principal's email address
[or ExternalUserName, adds a later qualification], encoded as a NameId, but
with nameid-format:*unspecified*. Can that be right?  If so, can I simply
add an encoder to ePPN like

<resolver:AttributeEncoder
   xsi:type="SAML2StringNameID"
   xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
   nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:*unspecified*" />

hoping that will be the Subject, or do I need to define a new attribute?

David Bantz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160203/389655b0/attachment.html>