nameid-format:persistent and issues

[Lalith Jayaweera]

what is the difference of below NameID format in idp 2.4.x vs idp 3.2.x,
and how they are treated differently in these two IdP versions.

urn:oasis:names:tc:SAML:2.0:nameid-format:persistent


in idp 2.4.x for Azure(Mcrosoft) integration the value of nameID with above
format was passed with the raw value of uid without any salt/encoding
applied to it.

however I can see in idp 3.2.x we can do salt etc for the  persistent
NameID and as a result I can see some encoded value being passed in SAML
response subject hence a failure. Instead of chaging the vi
saml-nameid.properties (keep salt values etc as is)

how to pass the uid value without applying any SALT etc....so that row uid
will be passed to the other end with
format urn:oasis:names:tc:SAML:2.0:nameid-format:persistent similar to idp
2.4.x

If I have to change saml-nameid.properties please advice


Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170427/4b501bd9/attachment.html>