Shibboleth IDP 3 and Onelogin PHP SAML library

[Cantor, Scott]

On 6/21/17, 12:23 PM, "users on behalf of Richard Genthner" <users-bounces at shibboleth.net on behalf of richard at guthnur.net> wrote:

> Has anyone used Shibboleth IDP 3 and the onelogin PHP SAML Library? We are trying to get it working for requesting the email
> attribute with the formatting of urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress but i'm getting this in the logs:

Then you didn't configure the IdP to support that Format. (*)

See the docs under NameID Generation, subtopic on custom formats. 

-- Scott

(*) Taken as given: never identify users by e-mail address, if you do need the address use the standards-defined "mail" attribute, and never use the NameID other than with the transient Format.