IdP 3.2 NameID and unspecified type
Youssef GHORBAL
youssef.ghorbal at pasteur.fr
Sat Mar 26 17:50:37 EDT 2016
Hello,
I have to deal with some local SPs that have the “unspecified” nameid format “illness” (the “unspecified” format is enforeced in metadata and in Authn requests)
I’ve read the Custom NameID generation doc :
https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration
Specicially the last section regarding dealing with the unspecified format.
What I understand is that to make it work, I need to add a Relaying Party override and a nameIDFormatPrecedence.
It will not work even if I add a nameIDFormatPrecedence in the DefaultRelyingParty, right ?
This leads me to ask, if someone could kindly help me through adding a custom condition based on a RegEx to catch all these local SPs (that happens to have the same EntityID naming schema). I could use RelyingPartyByName and list all the SPs namedIds in there, but I want to avoid changing the value whenever I have a new SP of the kind.
Any help is needed.
Youssef Ghorbal
Institut Pasteur
More information about the users
mailing list