A little clarification on NameIDs

Cantor, Scott cantor.2 at osu.edu
Fri Feb 12 18:07:26 EST 2016


> Thanks, Scott. So, if I don't mind anyone requesting the mail nameid in their
> metadata to get it without explicit filter configuration, I can set the saml-
> nameid configuration to unfiltered. If I'm not confortable with that but the
> vendor can't also handle an attribute value coming through in the assertion,
> I'm back to the old fallback of the second attribute definition that doesn't
> include the encoders.
> 
> Is that correct?

You can also add an activation condition based on RP ID to the NameID generator.

-- Scott



More information about the users mailing list