NameIDFormat w/ IdP 3.3

[Tom Poage]

Doh! We were trying to figure out why SSO for this (vendor) SP sometimes worked, and sometimes didn't.

Thanks for the extra set of eyes!

Tom.

> On Jan 20, 2017, at 12:36 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 1/20/17, 3:22 PM, "users on behalf of Tom Poage" <users-bounces at shibboleth.net on behalf of tfpoage at ucdavis.edu> wrote:
> 
>> SP metadata (inadvertently) loaded with a single NameIDFormat element:  
>> urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified
> 
> That constant does not exist, so it's simply "some value you stuck in" that the IdP doesn't support and so cannot satisfy. "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" is the one that the IdP recognizes and so decides it may send anything and picks the default.
> 
> -- Scott
> 
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net