persitentID nameID for specific SPs, transient for default

[Boyd, Todd M.]

Cool -- I hadn't actually been that far down the rabbit hole, but that's definitely something we'll need to take advantage of in the future. For this particular SP, I had to handcraft the metadata file, but I can see us getting a metadata file from a vendor further down the line that needs to be adjusted with filtering.

https://wiki.shibboleth.net/confluence/display/IDP30/NameIDFormatFilter


-Todd


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, December 13, 2017 10:28 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: persitentID nameID for specific SPs, transient for default

On 12/13/17, 11:21 AM, "users on behalf of Jehan PROCACCIA" <users-bounces at shibboleth.net on behalf of jehan.procaccia at tem-tsp.eu> wrote:

> does this mean that if SPs metadata don't  ask for that specific nameID , my IDP won't send it ?

The format selection process is documented in the wiki page.

> where do you see (which xml element) tells in the metadata what nameID format is expeted ?

<NameIDFormat>

The recommended selection trigger is putting them in the metadata or attaching them to the metadata via filter.
 
-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net