oasis:names:tc:SAML:2.0:nameid-format:persistent

[Cantor, Scott]

On 4/23/20, 3:47 PM, "users on behalf of Joshua Brodie" <users-bounces at shibboleth.net on behalf of josbrodie at gmail.com> wrote:

> How can we can override it for this 1 cloud service that insists on 'urn:oasis:names:tc:SAML:2.0:nameid
> -format:persistent' having value 'mail'?

First, I would bet they don't even know the Format field exists. Did you try sending it with the standard Format for emailAddress?

If that actually fails, you would have to ensure your generator appears in the list before the <ref> to the default one for persistent. You picked the order it's running them in.

-- Scott