passing correct nameid after shib3 upgrade

Klingenstein, Nate nklingenstein at calstate.edu
Mon Oct 17 12:59:38 EDT 2016


It "ships with" a bunch of 'em now.  I have no idea if this is accurate or whether the behavior varies depending on what you send.  Nothing to add on the rest.

https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml

<NameIDFormat>
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
</NameIDFormat>
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<NameIDFormat>
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
</NameIDFormat>
<NameIDFormat>
urn:oasis:names:tc:SAML:2.0:nameid-format:transient
</NameIDFormat>
<NameIDFormat>
urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
</NameIDFormat>

> On Oct 17, 2016, at 9:28 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> In the case of O365, I would imagine that would entail its metadata being adjusted to include a NameIDFormat element.



More information about the users mailing list