NameID without explicit Format

Robert Lowe robertmlowe at rmlowe.com
Thu May 19 08:14:47 EDT 2016


I have an IdP sending SAML 2 assertions without an explicit NameID format.

<NameID>jdoe</NameID>

If I'm reading SAML 2.0 Core correctly, that should be equivalent to
sending:

<NameID
Format="urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified">jdoe</NameID>

So I'd expect to be able to map it using the following:

<Attribute name="urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified"
id="my-attribute">
   <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$Name"/>
</Attribute>

But I'm not seeing any attribute mapped.

Is there an obvious misunderstanding here or do I just need to check my
configuration more carefully?

-- 
Best regards,

Robert Lowe
http://crepuscular.rmlowe.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160519/897c94dc/attachment.html>


More information about the users mailing list