Define a relying party profile for AuthnRequestsSigned="true"

[Cantor, Scott]

> Then I put this in saml-nameid.xml:
> 
>      <bean parent="shibboleth.SAML2AttributeSourcedGenerator"
>             p:format="urn:oid:0.9.2342.19200300.100.1.1"
>             p:attributeSourceIds="#{ {'uid', 'UDC_IDENTIFIER'} }" />

Why two attributes as a source? Are there actually two?

> The instructions for getting this thing talking to an external IdP aren't
> abundantly clear, since they have their own IdP and have just started
> supporting talking to someone else's. (In fact, their syntax for how to return
> "UDC_IDENTIFIER" with another attribute as a source were just plain wrong.)
> So if anyone has got this working - especially knowing what magic parameters
> to use in the ssomanager configuration - I would appreciate your advice.

Certainly it's possible they actually require "unspecified". I didn't say it would work, I just said it's worth trying to avoid it before falling back to that.

-- Scott