Shibboleth experience with LibApps by SpringShare

[Nate Klingenstein]

Dear Team UVic,
> This translation to claims should be fairly straight-forward, I think - but the vendor has asked that username be released as this format : 
>  
> urn:oasis:names:tc:SAML:2.0:nameid-format:transient
>  
> ...which doesn't sound semantically correct, according to the SAML spec.
> 
> Thanks for any tips!
> 
I would be hard pressed to come up with a username that matched the defined semantics of a transient identifier.

There are two tactical approaches: reason with the SP, or try sending the SP something that is actually valid to see if they even notice:

I've had good success pushing back on this specific permutation just because it's so obviously nonsensical.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160517/c9559ff5/attachment-0001.html>