Custom NameID Generation

[Michael Dahlberg]

I'm having a problem in IdP v3 (disabling all, I think, legacy v2 support)
custom NameID generation:

(1) I've configured the selection process for the NameID by adding the
following line to the metadata:

 <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>

(2) Uncommented the following in saml-nameid.xml file

    <util:list id="shibboleth.SAML2NameIDGenerators">

        <ref bean="shibboleth.SAML2TransientGenerator" />

        <!-- Uncommenting this bean requires configuration in
saml-nameid.properties. -->
        <!--
        <ref bean="shibboleth.SAML2PersistentGenerator" />
        -->


        <bean parent="shibboleth.SAML2AttributeSourcedGenerator"

p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
            p:attributeSourceIds="#{ {'mail'} }" />


    </util:list>

Also, the source attribute 'mail' is correctly resolved.

(3) And released the "emailAddress" attribute from the attribute-filter.xml
file

The log file shows the following:

2016-03-04 13:21:56,634 - DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:106]
- Trying to generate identifier with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
2016-03-04 13:21:56,635 - DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:110]
- No generators installed for Format
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress, trying
default/fallback method
2016-03-04 13:21:56,635 - DEBUG
[net.shibboleth.idp.saml.nameid.impl.LegacyNameIdentifierGenerator:127] -
No AttributeContext or resolved IdPAttributes found, nothing to do
2016-03-04 13:21:56,635 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:341] - Profile
Action AddNameIDToSubjects: Unable to generate a NameID, leaving empty

I thought that by uncommenting the relevant section in saml-nameid.xml that
I was installing the appropriate generator.  Am I incorrect?

As an aside, I still have the following lines uncommented in
saml-nameid.properties:

idp.nameid.saml2.legacyGenerator= shibboleth.LegacySAML2NameIDGenerator
idp.nameid.saml1.legacyGenerator=
shibboleth.LegacySAML1NameIdentifierGenerator

Would this cause this problem?

Thanks,
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160304/dfd69a66/attachment-0001.html>