Ex: Updated Adobe "IDP" (SP) config results in scrambled nameid

Paul B. Henson henson at cpp.edu
Tue Oct 20 02:02:42 UTC 2020


On Mon, Oct 19, 2020 at 05:17:45PM -0700, Ben Poliakoff wrote:
> With the current SP configuration
> "username at reed.edu<mailto:username at reed.edu>" is released, when I test
> the new configuration I can see in the logs that it's releasing a 32
> character alphanumeric string.  And indeed the test result page
> reports that string as my username.

Sounds like it's getting the transient ID instead of the email address.
Did you update the Adobe supplied metadata (which at least for my
deployment listed multiple accepted name ID formats) to only have the
email format, or override the selected nameid format for the SP?


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768


More information about the users mailing list