v3.2 - unsupportable identifier -Name ID

[Andrew Morgan]

On Mon, 20 Feb 2017, Ramaiah, Vanna G. wrote:

> I am working on upgrading to v3.2. All SPs that were using NameIds 
> (specified and unspecified) are throwing error even if a format is 
> specified. Could you please tell me how to fix this and also point me to 
> a document that has valid list of NameId format.
> nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
> nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"

In-place upgrades should be seamless.  Assuming you are upgrading from IDP 
v2, did you disable the legacy NameID generation in 
saml-nameid.properties:

idp.nameid.saml2.legacyGenerator= shibboleth.LegacySAML2NameIDGenerator

I'm trying to figure out if you are using the legacy v2 NameID stuff or 
the new v3 generation.

Thanks,
 	Andy