A little clarification on NameIDs
Cantor, Scott
cantor.2 at osu.edu
Fri Feb 12 18:07:26 EST 2016
> Thanks, Scott. So, if I don't mind anyone requesting the mail nameid in their
> metadata to get it without explicit filter configuration, I can set the saml-
> nameid configuration to unfiltered. If I'm not confortable with that but the
> vendor can't also handle an attribute value coming through in the assertion,
> I'm back to the old fallback of the second attribute definition that doesn't
> include the encoders.
>
> Is that correct?
You can also add an activation condition based on RP ID to the NameID generator.
-- Scott
More information about the users
mailing list