Custom NameID in Shibboleth 2

[Cantor, Scott]

On 3/1/19, 2:34 PM, "Emily Heiner" <eheiner at whatcom.edu> wrote:

> Thanks for the help. I ended up getting it to work, actually. Logs in to Adobe without issue now.

You're just hacking it into submission by mislabeling an encoder's Format as "transient" so that when it defaults to that it happens to pick what you wanted. That itself isn't something it would do predictably. And that's an invalid piece of SAML output. The fact that Adobe doesn't care is not a good thing, it's just a bug.

You don't need SAML 1 support here, and the SAML 2 encoder needs the emailAddress Format, not transient.

-- Scott