AuthnRequest question

[Cantor, Scott]

On 3/5/16, 9:18 AM, "users on behalf of Doan, Tommy" <users-bounces at shibboleth.net on behalf of tdoan at smu.edu> wrote:



>Right, I was just asking where the NameIDPolicy Format element in the request comes from. Now I understand it's strictly a configuration item on this ADFS SP side, and can't be manipulated by the SP metadata I have for them. That makes sense. The odd thing is that there are 3 Name ID formats specified in their metadata, and none of them match the one sent in their request. 

Right, refer to my comment. They don't know what they're doing (that goes for Microsoft and the deployer).

>In the end, this sounds like an element of the request that the IdP will just ignore, so I will too. Thanks Scott. 

It absolutely won't ignore the element, it ignores "unspecified". Any other value is normative and will result in that format being used, or an error.

-- Scott