NameID Format Generation

[Cantor, Scott]

> I think that’s my problem.  I apologize if these questions are already
> answered in the wiki, I’m just not sure where to look for them.

https://wiki.shibboleth.net/confluence/display/IDP30/NameIDGenerationConfiguration

> (2) Is the match based on the entityID specified in the metadata or the end
> points?

There is nothing ever based on endpoints in SAML.

> (3) Is there a method or tool that can be used to determine what data the SP
> is providing that the IdP is then trying to match against?

The data the SP provides is the NameIDPolicy in the AuthnRequest and its metadata, that's it.

-- Scott