SAManage with Shibboleth 3?

[Cantor, Scott]

> > The NameIDFormat trick is just a convenience to signaling the IdP what to
> do and it inevitable applies only to local metadata pretty much by definition.
> 
> In that case, of what use is the NameIDFormat metadata filter?

For exactly that purpose. Because it works only locally, it adds the right format to the metadata at runtime since it's never going to be there in a remote metadata source. You'll recall I tentatively asked about InCommon supporting it, but then I realized after asking that it was pointless, no services can know (nor do they care) which Format they'll be getting from any given IdP.

-- Scott