Issue with urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

Hamsa mshailaja at gmail.com
Tue Oct 16 14:31:58 EDT 2018


Hi,
I am getting Policy checking disabled for NameIDPolicy with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified though I have defined
my bean as below in my relying-party.xml file and I am using activation
condition

<bean id="MyBean" parent="RelyingParty">
          <property name="activationCondition" 
                          ref="ServiceNowCondition" /> 
         <property name="responderId" value="XXXXXXXXXX" />
			<property name="profileConfigurations">
				<list>
					<bean parent="SAML2.SSO" p:assertionLifetime="PT60M"
						p:encryptAssertions="false" p:securityConfigurationref="XXXXXXXXX"
					
p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
/>
					
				</list>
			</property>

        </bean>

And my SP metadata has 
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>

And my saml-nameid.xml

<bean parent="shibboleth.SAML2AttributeSourcedGenerator"
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
p:attributeSourceIds="#{ {'username'} }">
			<property name="activationCondition">
				<bean parent="shibboleth.Conditions.RelyingPartyId"
					c:candidates="#{{
						<!-- my SP entityIDs -->
				}}" />
			</property>
		</bean>

And i have enabled 
idp.nameid.saml2.legacyGenerator = shibboleth.LegacySAML2NameIDGenerator
idp.nameid.saml1.legacyGenerator =
shibboleth.LegacySAML1NameIdentifierGenerator

Please someone guide me in right direction? I have following in my Log,

2018-10-16 10:25:00,978  - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile
Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion
Subjects
2018-10-16 10:25:00,979 -DEBUG
[org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] -
Policy checking disabled for NameIDPolicy with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
2018-10-16 10:25:00,979 - WARN
[org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:?]
- Ignoring NameIDFormat metadata that includes the 'unspecified' format
2018-10-16 10:25:00,982 -   DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?]
- Configuration specifies the following formats: []
2018-10-16 10:25:00,982 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?]
- No formats specified in configuration or in metadata, returning default
2018-10-16 10:25:00,982 -  DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile
Action AddNameIDToSubjects: Candidate NameID formats:
[urn:oasis:names:tc:SAML:2.0:nameid-format:transient]
2018-10-16 10:25:00,982 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile
Action AddNameIDToSubjects: Trying to generate NameID with Format
urn:oasis:names:tc:SAML:2.0:nameid-format:transient
2018-10-16 10:25:00,982 -DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] -
Trying to generate identifier with Format
urn:oasis:names:tc:SAML:2.0:nameid-format:transient



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list