Problem setting NameIdFormat for SP3

[Per-Ake Dahl Ejemark]

Hi!

It's not I that want the NameIDFormat at the end, it's the Idp that demands this. Don't ask me why. The metadata is going to be used in a test environment and will be stripped down to a bare minimum in the production environment.

Sadly, I'm beginning to suspect that the IdP doesn't have enough competent people working for them because of this and some other things regarding the encryption.

/Per-Åke

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: den 31 oktober 2018 15:27
To: users at shibboleth.net
Subject: Re: Problem setting NameIdFormat for SP3

* Per-Ake Dahl Ejemark <perake.dahlejemark at holmedal.se> [2018-10-31 15:23]:
> The Idp that I'm forced to uses demands that this is set in the 
> metadata. That's the answer to the question.

That's OK, I guess, but misses the point I was trying to make, which is why *you* would want to have the NameIDFormat added to the metadata handler endpoint then: That metadata very likely doesn't contain many other necessary/useful things and it shouldn't be consumed directly by any IDP. Cf. the warning in the comment at the beginning of metadata generated by that handler.
-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net