Configuring Release of Other Identifiers for NameID

[King Huang]

Ah, that doc explains it perfectly. I couldn't find it in my Google searches. Thanks!

King

Sent from my iPhone

> On Jan 19, 2016, at 4:12 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 1/19/16, 6:06 PM, "users on behalf of King Huang" <users-bounces at shibboleth.net on behalf of kchuang at ucalgary.ca> wrote:
> 
> 
> 
>> I'm trying to configure the release of an attribute like uid (ucid in this specific case) as the subject’s nameid to a certain service provider. I can get attribute released as part of the attributestatement easily enough. But, I’m not having any luck getting it to be returned as the subject’s nameid, instead of the transient id.
>> 
>> The SP is requesting urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified.
> 
> That's a nonsensical thing to do and we don't honor that, as the documentation explicitly says.
> 
>> And, I’ve configured an attribute sourced generator in saml-namedid.xml. But, the IdP always sends a transient id instead.
> 
> https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net