help with NameIDs

[Mark K. Miller]

Andy, Scott, you guys rock!  Your replies on this yesterday have me headed 
in the right direction now.

On Thu, 28 Jul 2016, Andrew Morgan wrote:

> One very important thing to keep in mind - the v3 IDP generates NameIDs 
> based on format(s) in the SAML request or the SP's metadata.  If the 
> SAML request from the SP says it wants a particular NameID format, the 
> IDP will try to do that.  If the SAML request doesn't specify which 
> format (or it unhelpfully requests "unspecified"), the IDP will use the 
> format from the SP's metadata.

This was my lesson for the day yesterday!  Again, Andy, thank you!

On Thu, 28 Jul 2016, Cantor, Scott wrote:

> Despite all the beliefs to the contrary, none of this has changed,
> really. Selection is exactly the same as before. When it's doing
> something different, that means the configuration wasn't upgraded
> directly and the attempt to recreate the settings wasn't accurate.
>
> I have yet to see a case where that's shown to be otherwise.

And, in case anyone ever doubts Scott, don't!  Obviously, you were correct 
again, Scott!  Using Andy's lesson of the day, and mixing that with your 
guidance, I threw away all the configuration crap I changed and came up 
with a new plan for testing.  It was my original test plan that was 
ill-devised that made me think I had problems.  With a better test plan, I 
have been able to verify that my NameIDs transitioned through the upgrade 
just fine.  As if I need to confirm what Scott already stated!  Hahaaha!

Thank you, Scott!

Max