various nameid formats

[IAM David Bantz]

On Tue, Mar 21, 2017 at 10:25 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-
> > format:urn:oid:2.16.840.1.113730.3.1.3</NameIDFormat>
>
> Sorry, I was reading too fast. Yes, that's nonsense. You cannnot make up
> values in somebody else's namespace.


Glad you clarified because I was questioning my sanity with your previous
response...

In addition, urn:oid:2.16.840.1.113730.3.1.3 is the OID for employeeNumber
rather than employeeID (MS's OID 1.2.840.113556.1.4.35)

But why would one use the NAME of an attribute for the NameID*Format*? I
could sorta imagine using the "syntax" (1.3.6.1.4.1.1466.115.121.1.15 -
Directory String).

I might be doomed to never really get NameIDs...

David Bantz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170321/d1c68ac9/attachment.html>