Help on unspecified nameID (IdP ver 3.2.x)

[IAM David Bantz]

Lalith Jayaweera, in case it's helpful to you to restate Scott's injunction
in more detail,

in ...conf/attribute-filter.xml add a release policy that can be as simple
as:

 <AttributeFilterPolicy id="releaseToMyTestSP">

>     <PolicyRequirementRule xsi:type="Requester" value="'https://myte
stsp.com/samlLogin <https://mytestsp.com/samlLogin%27>" />

>     <AttributeRule attributeID="uid">

>         <PermitValueRule xsi:type="ANY" />

>     </AttributeRule>
</AttributeFilterPolicy>

Assuming you have elsewhere configured a nameID based on that uid
attribute, this will make it available to be used in the SAML assertion to
https://mytestsp.com/samlLogin <https://mytestsp.com/samlLogin%27>.

My apologies if this isn't useful to you...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170410/7a608ee4/attachment.html>