NameIds (again)

Cantor, Scott cantor.2 at osu.edu
Thu Sep 29 09:42:42 EDT 2016


On 9/29/16, 9:29 AM, "users on behalf of Dave Perry" <users-bounces at shibboleth.net on behalf of Dave.Perry at hull-college.ac.uk> wrote:

>    I initially had no AttributeEncoder part there, and xsi:type was "SAML2StringNameID" -
> that was causing it to fail to generate the nameID.

I don't understand that statement, SAML2StringNameID is one of the older attribute encoders, you would have had an AttributeEncoder there, just a different type of one. So clarifying that would help.

Secondly, if you don't have the property set that enables the "legacy" NameIDGeneration through the resolver, then those deprecated NameID-generating encoders won't run. So there's that.

Lastly, none of this should have impacted whether the attribute was available to the non-deprecated generator layer. So this still doesn't make sense to me.

-- Scott




More information about the users mailing list