IdP 3.2 NameID and unspecified type

Youssef GHORBAL youssef.ghorbal at pasteur.fr
Sat Mar 26 17:50:37 EDT 2016


Hello,

	I have to deal with some local SPs that have the “unspecified” nameid format “illness” (the “unspecified” format is enforeced in metadata and in Authn requests)
	I’ve read the Custom NameID generation doc :
	https://wiki.shibboleth.net/confluence/display/IDP30/CustomNameIDGenerationConfiguration
	Specicially the last section regarding dealing with the unspecified format.

	What I understand is that to make it work, I need to add a Relaying Party override and a nameIDFormatPrecedence. 
	It will not work even if I add a nameIDFormatPrecedence in the DefaultRelyingParty, right ?

	This leads me to ask, if someone could kindly help me through adding a custom condition based on a RegEx to catch all these local SPs (that happens to have the same EntityID naming schema). I could use RelyingPartyByName and list all the SPs namedIds in there, but I want to avoid changing the value whenever I have a new SP of the kind.

	Any help is needed.

Youssef Ghorbal
Institut Pasteur


More information about the users mailing list