NameID format values

Peter Schober peter.schober at univie.ac.at
Mon Apr 10 08:10:13 EDT 2017


* Mike Flynn <shibbolethlynda at yahoo.com> [2017-04-10 13:54]:
> I have an IDP that wants to send Format="SPNameQualifier" which seems odd.

$ fgrep '"Format"' saml-schema-assertion-2.0.xsd
                <attribute name="Format" type="anyURI" use="optional"/>

I.e., it's specified to be a URI. The string "SPNameQualifier" is not
a valid URI, but SPNameQualifier is a valid XML attribute name on a
NameID element. Mixing those up seems like a father severe coding error.
-peter


More information about the users mailing list