persitentID nameID for specific SPs, transient for default

Cantor, Scott cantor.2 at osu.edu
Wed Dec 13 11:28:06 EST 2017


On 12/13/17, 11:21 AM, "users on behalf of Jehan PROCACCIA" <users-bounces at shibboleth.net on behalf of jehan.procaccia at tem-tsp.eu> wrote:

> does this mean that if SPs metadata don't  ask for that specific nameID , my IDP won't send it ?

The format selection process is documented in the wiki page.

> where do you see (which xml element) tells in the metadata what nameID format is expeted ?

<NameIDFormat>

The recommended selection trigger is putting them in the metadata or attaching them to the metadata via filter.
 
-- Scott




More information about the users mailing list