NameID Format Generation

[Cantor, Scott]

 > The data the SP provides is the NameIDPolicy in the AuthnRequest and its
> metadata, that's it.

More to the point, no SP brain dead enough to need a NameID (or think they do) wil provide either of these inputs. Many federations (e.g. InCommon) don't support NameIDFormat elements in metadata, but a good number of cases where it even comes up aren't providing metadata anyway. The most common approach is to add it to the metadata you have to generate, or locally load, into the IdP.

-- Scott