A little clarification on NameIDs

[Cantor, Scott]

On 2/14/16, 10:37 AM, "users on behalf of Tom Scavo" <users-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:



>On Sun, Feb 14, 2016 at 9:58 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>
>> ... you have to trust metadata, so the idea that you would worry about somebody improperly including a NameIDFormat wasn't in my mind. InCommon itself doesn't support that element, though I suppose it's likely that eduGAIN's feed does.
>
>Yes, and since eduGAIN metadata includes that element, InCommon
>metadata will also include that element (after tomorrow :)

So I guess, yeah, if you're definitely concerned about it, sticking to filtered attributes for those NameIDs is the simplest option. The chance of an SP caring about seeing it as an Attribute is pretty low.

-- Scott