Custom NameId value

[Mohamed Lrhazi]

Thanks Scott. I ll read on the docs... but here the log... apparently it
did try to use that format :


2017-03-26 18:26:22,388 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:341] - Profile
Action AddNameIDToSubjects: Unable to generate a NameID, leaving empty
 2017-03-26 18:26:22,388 - DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:106]
- Trying to generate identifier with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"
 2017-03-26 18:26:22,387 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:396] - Profile
Action AddNameIDToSubjects: Trying to generate NameID with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"
 2017-03-26 18:26:22,386 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:323] - Profile
Action AddNameIDToSubjects: Candidate NameID formats:
[urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"]
 2017-03-26 18:26:22,385 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:137]
- Configuration did not specify any formats, relying on metadata alone
 2017-03-26 18:26:22,385 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:124]
- Configuration specifies the following formats: []
 2017-03-26 18:26:22,384 - DEBUG
[org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:82]
- Metadata specifies the following formats:
[urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"]
 2017-03-26 18:26:22,384 - DEBUG
[org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:218]
- Policy checking disabled for NameIDPolicy with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified



On Sun, Mar 26, 2017 at 4:07 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/26/17, 3:36 PM, "users on behalf of Mohamed Lrhazi" <
> users-bounces at shibboleth.net on behalf of lrhazi at cua.edu> wrote:
>
> > am trying to force Assertion/Subject/NameID to be the CN of the user, as
> requested by the SP....
> > I tried adding a custom format in the SP metadata:
>
> You have no standing to make up names in the OASIS namespace, so please
> don't. That is invalid.
>
> In other respects, there's nothing wrong mechanically with your approach.
>
> > The NameID though is left empty:
>
> Then the system probably didn't select that Format to use, and you need to
> read the documentation on Format selection. You left out ample logging that
> would have shown that clearly.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170326/653c24a9/attachment.html>