Custom NameID Generation

[Nate Klingenstein]

Michael,

> So you're saying that 'emailAddress' is a type of format and that 'mail' should be released?

I think the confusion here stems from all the different points where attributes can be assigned names.  It can have one name in the directory, another name internally in the IdP, and another name outbound.

The internal to the IdP stuff is, well, internal.  Any name there can be anything you want as long as it’s consistent.  The internal name that ships with the IdP changed between v2.4 and v3, but the names on the wire didn’t change.

2.4.5:
    <resolver:AttributeDefinition xsi:type="ad:Simple" id="email" sourceAttributeID="mail”>
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" />

3.2.1:
    <resolver:AttributeDefinition xsi:type="ad:Simple" id="mail" sourceAttributeID="mail”>
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" />

Take care,
Nate.