SAManage with Shibboleth 3?

Peter Schober peter.schober at univie.ac.at
Wed Apr 18 09:35:29 EDT 2018


* Mark Cairney <Mark.Cairney at ed.ac.uk> [2018-04-18 14:25]:
> My final relying-party.xml config is:
> 
>     <bean parent="RelyingPartyByName" c:relyingPartyIds="SAManage.com">
>       <property name="profileConfigurations">
>         <list>
>           <bean parent="SAML2.SSO" p:encryptNameIDs="never"
> p:encryptAssertions="never"
> p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/>
>         </list>
>       </property>
>     </bean>
> 
> This isn't wildly different from the original config I had in place

Which is why my earlier comment about nameIDFormatPrecedence still
applies. (TL;DR: Put it in metadata instead.)
-peter


More information about the users mailing list