Custom NameID in Shibboleth 2

Cantor, Scott cantor.2 at osu.edu
Fri Mar 1 13:51:59 EST 2019


On 3/1/19, 1:47 PM, "users on behalf of Emily Heiner" <users-bounces at shibboleth.net on behalf of eheiner at whatcom.edu> wrote:

> I’m attempting to configure our Shib 2 IdP

Shibboleth 2 has been EOL for years. You need to be moving to something else. If you can't upgrade, then you shouldn't use Shibboleth, you should find something you can maintain, or look at oursourcing.
 
> Adobe says they require the NameID to be an email address

They do NOT require that. And you don't want that, unless your email addresses are extremely stable. Set a Federation ID in the user records in Adobe's system, and then you can send any appropriate Format of NameID you choose that matches the Federation ID value.

-- Scott





More information about the users mailing list