NameID Format Generation

[Cantor, Scott]

> Will it continue to work in IdP v3? If not, what are the recommended
> alternatives?

This is what I said:

> 	The triggers for format selection are essentially identical to V2. What
> you were doing that no longer works is trying to use denial rules to limit the
> possible choices to exclude transient usage.

No, it doesn't work anymore, it has no effect whatsoever. There's no "attribute" being generated anymore to carry the transient ID, that's just all ignored code.

Controlling format selection is documented under NameID Generation, and the same format controls used in V2 that have been around for many years work identically under V3.

The approach you're talking about is an ugly hack that was replaced almost as soon as it was devised and hasn't been suggested for many years.

-- Scott