Custom NameId value

Mohamed Lrhazi lrhazi at cua.edu
Sun Mar 26 20:57:52 EDT 2017


And it works! Thanks a lot.

On Sun, Mar 26, 2017 at 8:52 PM, Mohamed Lrhazi <lrhazi at cua.edu> wrote:

> Oh!!!!! extra double quotes the name!! let me fix and try again....
>
> Metadata specifies the following formats: [urn:oasis:names:tc:SAML:1.1:n
> ameid-format:emaintNameid"]
>
>
>
> On Sun, Mar 26, 2017 at 8:38 PM, Mohamed Lrhazi <lrhazi at cua.edu> wrote:
>
>> Thanks Scott. I ll read on the docs... but here the log... apparently it
>> did try to use that format :
>>
>>
>> 2017-03-26 18:26:22,388 - DEBUG [org.opensaml.saml.saml2.profi
>> le.impl.AddNameIDToSubjects:341] - Profile Action AddNameIDToSubjects:
>> Unable to generate a NameID, leaving empty
>>  2017-03-26 18:26:22,388 - DEBUG [org.opensaml.saml.common.prof
>> ile.impl.ChainingNameIdentifierGenerator:106] - Trying to generate
>> identifier with Format urn:oasis:names:tc:SAML:1.1:na
>> meid-format:emaintNameid"
>>  2017-03-26 18:26:22,387 - DEBUG [org.opensaml.saml.saml2.profi
>> le.impl.AddNameIDToSubjects:396] - Profile Action AddNameIDToSubjects:
>> Trying to generate NameID with Format urn:oasis:names:tc:SAML:1.1:na
>> meid-format:emaintNameid"
>>  2017-03-26 18:26:22,386 - DEBUG [org.opensaml.saml.saml2.profi
>> le.impl.AddNameIDToSubjects:323] - Profile Action AddNameIDToSubjects:
>> Candidate NameID formats: [urn:oasis:names:tc:SAML:1.1:n
>> ameid-format:emaintNameid"]
>>  2017-03-26 18:26:22,385 - DEBUG [net.shibboleth.idp.saml.profi
>> le.logic.DefaultNameIdentifierFormatStrategy:137] - Configuration did
>> not specify any formats, relying on metadata alone
>>  2017-03-26 18:26:22,385 - DEBUG [net.shibboleth.idp.saml.profi
>> le.logic.DefaultNameIdentifierFormatStrategy:124] - Configuration
>> specifies the following formats: []
>>  2017-03-26 18:26:22,384 - DEBUG [org.opensaml.saml.common.prof
>> ile.logic.MetadataNameIdentifierFormatStrategy:82] - Metadata specifies
>> the following formats: [urn:oasis:names:tc:SAML:1.1:n
>> ameid-format:emaintNameid"]
>>  2017-03-26 18:26:22,384 - DEBUG [org.opensaml.saml.common.prof
>> ile.logic.AbstractNameIDPolicyPredicate:218] - Policy checking disabled
>> for NameIDPolicy with Format urn:oasis:names:tc:SAML:1.1:na
>> meid-format:unspecified
>>
>>
>>
>> On Sun, Mar 26, 2017 at 4:07 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>
>>> On 3/26/17, 3:36 PM, "users on behalf of Mohamed Lrhazi" <
>>> users-bounces at shibboleth.net on behalf of lrhazi at cua.edu> wrote:
>>>
>>> > am trying to force Assertion/Subject/NameID to be the CN of the user,
>>> as requested by the SP....
>>> > I tried adding a custom format in the SP metadata:
>>>
>>> You have no standing to make up names in the OASIS namespace, so please
>>> don't. That is invalid.
>>>
>>> In other respects, there's nothing wrong mechanically with your approach.
>>>
>>> > The NameID though is left empty:
>>>
>>> Then the system probably didn't select that Format to use, and you need
>>> to read the documentation on Format selection. You left out ample logging
>>> that would have shown that clearly.
>>>
>>> -- Scott
>>>
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170326/f6bf8a2b/attachment-0001.html>


More information about the users mailing list