Custom NameId value

[Mohamed Lrhazi]

Oh!!!!! extra double quotes the name!! let me fix and try again....

Metadata specifies the following formats: [urn:oasis:names:tc:SAML:1.1:
nameid-format:emaintNameid"]



On Sun, Mar 26, 2017 at 8:38 PM, Mohamed Lrhazi <lrhazi at cua.edu> wrote:

> Thanks Scott. I ll read on the docs... but here the log... apparently it
> did try to use that format :
>
>
> 2017-03-26 18:26:22,388 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:341]
> - Profile Action AddNameIDToSubjects: Unable to generate a NameID, leaving
> empty
>  2017-03-26 18:26:22,388 - DEBUG [org.opensaml.saml.common.profile.impl.
> ChainingNameIdentifierGenerator:106] - Trying to generate identifier with
> Format urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"
>  2017-03-26 18:26:22,387 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:396]
> - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format
> urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"
>  2017-03-26 18:26:22,386 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:323]
> - Profile Action AddNameIDToSubjects: Candidate NameID formats:
> [urn:oasis:names:tc:SAML:1.1:nameid-format:emaintNameid"]
>  2017-03-26 18:26:22,385 - DEBUG [net.shibboleth.idp.saml.profile.logic.
> DefaultNameIdentifierFormatStrategy:137] - Configuration did not specify
> any formats, relying on metadata alone
>  2017-03-26 18:26:22,385 - DEBUG [net.shibboleth.idp.saml.profile.logic.
> DefaultNameIdentifierFormatStrategy:124] - Configuration specifies the
> following formats: []
>  2017-03-26 18:26:22,384 - DEBUG [org.opensaml.saml.common.profile.logic.
> MetadataNameIdentifierFormatStrategy:82] - Metadata specifies the
> following formats: [urn:oasis:names:tc:SAML:1.1:
> nameid-format:emaintNameid"]
>  2017-03-26 18:26:22,384 - DEBUG [org.opensaml.saml.common.profile.logic.
> AbstractNameIDPolicyPredicate:218] - Policy checking disabled for
> NameIDPolicy with Format urn:oasis:names:tc:SAML:1.1:
> nameid-format:unspecified
>
>
>
> On Sun, Mar 26, 2017 at 4:07 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 3/26/17, 3:36 PM, "users on behalf of Mohamed Lrhazi" <
>> users-bounces at shibboleth.net on behalf of lrhazi at cua.edu> wrote:
>>
>> > am trying to force Assertion/Subject/NameID to be the CN of the user,
>> as requested by the SP....
>> > I tried adding a custom format in the SP metadata:
>>
>> You have no standing to make up names in the OASIS namespace, so please
>> don't. That is invalid.
>>
>> In other respects, there's nothing wrong mechanically with your approach.
>>
>> > The NameID though is left empty:
>>
>> Then the system probably didn't select that Format to use, and you need
>> to read the documentation on Format selection. You left out ample logging
>> that would have shown that clearly.
>>
>> -- Scott
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170326/33771e05/attachment.html>