Issue with urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
Hamsa
mshailaja at gmail.com
Tue Oct 16 14:31:58 EDT 2018
Hi,
I am getting Policy checking disabled for NameIDPolicy with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified though I have defined
my bean as below in my relying-party.xml file and I am using activation
condition
<bean id="MyBean" parent="RelyingParty">
<property name="activationCondition"
ref="ServiceNowCondition" />
<property name="responderId" value="XXXXXXXXXX" />
<property name="profileConfigurations">
<list>
<bean parent="SAML2.SSO" p:assertionLifetime="PT60M"
p:encryptAssertions="false" p:securityConfigurationref="XXXXXXXXX"
p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
/>
</list>
</property>
</bean>
And my SP metadata has
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
And my saml-nameid.xml
<bean parent="shibboleth.SAML2AttributeSourcedGenerator"
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
p:attributeSourceIds="#{ {'username'} }">
<property name="activationCondition">
<bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{
<!-- my SP entityIDs -->
}}" />
</property>
</bean>
And i have enabled
idp.nameid.saml2.legacyGenerator = shibboleth.LegacySAML2NameIDGenerator
idp.nameid.saml1.legacyGenerator =
shibboleth.LegacySAML1NameIdentifierGenerator
Please someone guide me in right direction? I have following in my Log,
2018-10-16 10:25:00,978 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile
Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion
Subjects
2018-10-16 10:25:00,979 -DEBUG
[org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] -
Policy checking disabled for NameIDPolicy with Format
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
2018-10-16 10:25:00,979 - WARN
[org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:?]
- Ignoring NameIDFormat metadata that includes the 'unspecified' format
2018-10-16 10:25:00,982 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?]
- Configuration specifies the following formats: []
2018-10-16 10:25:00,982 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?]
- No formats specified in configuration or in metadata, returning default
2018-10-16 10:25:00,982 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile
Action AddNameIDToSubjects: Candidate NameID formats:
[urn:oasis:names:tc:SAML:2.0:nameid-format:transient]
2018-10-16 10:25:00,982 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile
Action AddNameIDToSubjects: Trying to generate NameID with Format
urn:oasis:names:tc:SAML:2.0:nameid-format:transient
2018-10-16 10:25:00,982 -DEBUG
[org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] -
Trying to generate identifier with Format
urn:oasis:names:tc:SAML:2.0:nameid-format:transient
--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list