IdP 3.2 NameID and unspecified type

[Cantor, Scott]

On 3/26/16, 5:50 PM, "users on behalf of Youssef  GHORBAL" <users-bounces at shibboleth.net on behalf of youssef.ghorbal at pasteur.fr> wrote:



>	I have to deal with some local SPs that have the “unspecified” nameid format “illness” (the “unspecified” format is enforeced in metadata and in Authn requests)

We do not accept that as a use case. If something is unspecified, it makes no sense to request it.

>It will not work even if I add a nameIDFormatPrecedence in the DefaultRelyingParty, right ?

That works fine, it means it will use that for every RP.

>	This leads me to ask, if someone could kindly help me through adding a custom condition based on a RegEx to catch all these local SPs (that happens to have the same EntityID naming schema).

There's an example of that in the ActivationConditions page which you will have to combine with the Custom RelyingParty Example in the RelyingPartyConfiguration page.

-- Scott

>