various nameid formats

[Cantor, Scott]

> * Ramaiah, Vanna G. <ramaiah at musc.edu> [2017-03-21 18:04]:
> > What are the various nameid formats? If a SP requires employee Id as
> Nameid, can I use this format?
> > <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-
> format:urn:oid:2.16.840.1.113730.3.1.3</NameIDFormat>

Sorry, I was reading too fast. Yes, that's nonsense. You cannnot make up values in somebody else's namespace.

>   <NameIDFormat>urn:oid:2.16.840.1.113730.3.1.3</NameIDFormat>
> would be OK-ish. Not literally either, because that OID seems to be
> owned by Netscape for Netscape LDAP attributes:
> http://www.alvestrand.no/objectid/2.16.840.1.113730.3.1.html

I guess that's what the RFC used, though?

> If you wanted to use employeeNumber from RFC 2798 then
> <NameIDFormat>2.16.840.1.113730.3.1.3</NameIDFormat>
> would be what you'd use.

You'd use urn:oid... with that, I think that's what you had above.

-- Scott