Integration with a Simitive SP

[Peter Schober]

* Todd, James <J.Todd at napier.ac.uk> [2016-09-13 19:18]:
> Thanks. We might not need it now, they've found the UID attribute
> I'm sending in the attribute statement and are trying to use that
> instead of the Subject statement. If they can do that then I don't
> have to force round pegs in square holes, hopefully.

JFYI, the recent consensus from this community seems to be that
esp. with "cloud" or other commercial SPs more often than not the SP
does not bother to check the nameid format sent.
(Doubly so if the SP demands use of the "unspecified" format.)

So if only "NameID in Subject" is acceptable /and/ the semantics for
the desired data structure do not match any of the published standard
nameid formats, set the nameid format to the URI of the formal
attribute name you're sending as NameID (e.g. ePPN's urn:oid...) and
either configure a matching nameid format on the recieving end, or
hope they're violating the spec by ignoring the nameid format
altogether.

Either way you wouldn't have to send incorrect/nonsensical data by
putting, say, an HR number info a persistnbt NameID on the wire.
-peter