SAManage with Shibboleth 3?
Peter Schober
peter.schober at univie.ac.at
Wed Apr 18 09:35:29 EDT 2018
* Mark Cairney <Mark.Cairney at ed.ac.uk> [2018-04-18 14:25]:
> My final relying-party.xml config is:
>
> <bean parent="RelyingPartyByName" c:relyingPartyIds="SAManage.com">
> <property name="profileConfigurations">
> <list>
> <bean parent="SAML2.SSO" p:encryptNameIDs="never"
> p:encryptAssertions="never"
> p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/>
> </list>
> </property>
> </bean>
>
> This isn't wildly different from the original config I had in place
Which is why my earlier comment about nameIDFormatPrecedence still
applies. (TL;DR: Put it in metadata instead.)
-peter
More information about the users
mailing list