NameIDFormat w/ IdP 3.3

Cantor, Scott cantor.2 at osu.edu
Fri Jan 20 15:58:37 EST 2017


On 1/20/17, 3:42 PM, "users on behalf of Tom Poage" <users-bounces at shibboleth.net on behalf of tfpoage at ucdavis.edu> wrote:

>    Doh! We were trying to figure out why SSO for this (vendor) SP sometimes worked, and sometimes didn't.

The difference between "no NameID" and "transient NameID" is "logout is possible". It has no effect on SSO whatsoever unless the implementation is broken.
 
-- Scott




More information about the users mailing list