nameID policy in SAML request

[Cantor, Scott]

On 3/22/17, 12:56 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:

> is:
>
> <samlp:NameIDPolicy 
>        Format="urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos" 
>        AllowCreate="true" />

Well, that is a constant defined in the standard. I'm sure the SP has no idea what it's doing, but...

> Do I just fake such a nameID in saml-nameid.xml conditional on that SP's ID?

Would I? No, I'd tell them to fix their bug.

How you choose to control use of formats is up to you, it's style. Derive it from an attribute and filter the attribute release if you prefer.
  
> Will 3.2 dutifully send such a nameID in SAML response?

If you support it.

-- Scott