Configuring Release of Other Identifiers for NameID

[Cantor, Scott]

On 1/19/16, 6:06 PM, "users on behalf of King Huang" <users-bounces at shibboleth.net on behalf of kchuang at ucalgary.ca> wrote:



>I'm trying to configure the release of an attribute like uid (ucid in this specific case) as the subject’s nameid to a certain service provider. I can get attribute released as part of the attributestatement easily enough. But, I’m not having any luck getting it to be returned as the subject’s nameid, instead of the transient id.
>
>The SP is requesting urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.

That's a nonsensical thing to do and we don't honor that, as the documentation explicitly says.

> And, I’ve configured an attribute sourced generator in saml-namedid.xml. But, the IdP always sends a transient id instead.

https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration

-- Scott