unspecified NameID in subject(V2) how to recreate in V3
Shweta Kautia
skautia at northcarolina.edu
Mon Oct 24 16:40:42 EDT 2016
Thanks Peter, you were right.
for closure on this issue and a related question— It was a metadata misconfiguration when loading IDP metadata into the SP from the /idp/shibboleth url. I finally generated a correct idp_metadata.xml file and uploaded to SP instead of using that url.
I just found out.. unlike V2, this url https://campus.edu/idp/shibboleth does not reflect the current metadata (extracted from various configs/certs etc). After updating the file manually under /metadata/idp_metadata.xml, how can i make sure that path uses this latest file? Is it just a re-build of war file or something else?
Thanks,
Shweta
On Oct 21, 2016, at 3:00 PM, Peter Schober <peter.schober at univie.ac.at<mailto:peter.schober at univie.ac.at>> wrote:
* Shweta Kautia <skautia at northcarolina.edu<mailto:skautia at northcarolina.edu>> [2016-10-21 20:38]:
<—————— V2 output ——————>
<saml2:Subject>
<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
NameQualifier="https://campus.edu/idp/shibboleth"
_2d09e366ab65d5708809090e123d</saml2:NameID>
I highly doubt that the vendor actually used those values and also
cares about the format.
(That looks like a transient NameID value to me, with only the Format
value changed? Only you know what your configuration is, of course,
and where the previous values came from.)
As such, and matching recent suggestions from this group, I'd ignore
that and not spend any time on recreating the previous behaviour here.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161024/d1ff6fed/attachment.html>
More information about the users
mailing list