v3.2 - unsupportable identifier -Name ID

[Ramaiah, Vanna G.]

This  is the error I get.  I commented out the relying party config of SP xyz from v2 and added this below code. Should this be placed in other bean?
<bean parent="RelyingPartyByName"
              c:relyingPartyIds="#{{XYZ'}}">
           
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO.custom" p:signAssertions="true" p:encryptAssertions="false"  p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
                </list>
            </property>
        </bean>
2017-02-22 17:11:39,181 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.RelyingPartyResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 298 in XML document from file [/opt/shibboleth-idp/conf/relying-party.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 298; columnNumber: 85; The prefix "c" for attribute "c:relyingPartyIds" associated with an element type "bean" is not bound.


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, February 22, 2017 4:48 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: v3.2 - unsupportable identifier -Name ID



On 2/22/17, 4:31 PM, "users on behalf of Ramaiah, Vanna G." <users-bounces at shibboleth.net on behalf of ramaiah at musc.edu> wrote:

> 3.In metadata of xyz,
>  <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>

The documentation tells you explicitly that that doesn't work.

> 4. I copy pasted the relying-party.xml from V2.4 to V3.2. where should the below segment go?

I can't tell you how to structure your relying party rules, but the settings are fine.

> 5. Should I add anything to saml-nameid.xml?

The same thing you would add for any custom format. There is no difference here except for the fact that you can't trigger it with metadata.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net