Problem setting NameIdFormat for SP3

[Peter Schober]

> What I want is that the generated metadata has the NameIdFormat
> elements at the end of the SPSSODescriptor.
[...]
>     </SPSSODescriptor>
> 
> I have tried to accomplish this by setting the <SSO> element in the shibboleth2.xml like this
> 

The documentation only mentions that this influences the NameIDFormat
that's sent in authn requests, so this probably doesn't extend into
metadata generation.
Since this setting only allows a single format (AFAIU) it would also
be unsuitable for use in SAML Metadata, as you'd likely want to
publish several NameIDFormat elements in metadata as your own example
shows.
So you'd probably have to add that to the metadata yourself.

Which brings us to the reason why you want this in the metadata
generation handler.

Finally, note that persistent NameIDs might be on the way out, at
least for deployments that care about saml2int.

-peter