SAML rocket.chat and testshib.org

[Peter Schober]

* Marcus Schopen <lists at localguru.de> [2017-03-11 10:53]:
>     <samlp:NameIDPolicy xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>                         Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
>                         AllowCreate="true"
>                         />

As the error (and Tom and Rod) said, your IDP does not support the
requested NameID format. (A Shib IDP does not support email-based
NameIDs out of the box, hence Tstshib doesn't either. Whether it's a
good idea to adapt your own IDP is questionable and depends whether
you get the application to use something else to uniquely identify the
subject.)
-peter