help with NameIDs

[Cantor, Scott]

> One very important thing to keep in mind - the v3 IDP generates NameIDs
> based on format(s) in the SAML request or the SP's metadata.

As did V2. Despite all the beliefs to the contrary, none of this has changed, really. Selection is exactly the same as before. When it's doing something different, that means the configuration wasn't upgraded directly and the attempt to recreate the settings wasn't accurate.

I have yet to see a case where that's shown to be otherwise.

> Don't forget to release the attributes that you are basing the NameID on
> (in attribute-filter.xml)!

That's generally done, but is optional, you can do otherwise if you prefer.

-- Scott