Updated Adobe "IDP" (SP) config results in scrambled nameid

[Ben Poliakoff]

On Tue, Oct 20, 2020 at 1:03 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/20/20, 3:46 PM, "users on behalf of Ben Poliakoff" <
> users-bounces at shibboleth.net on behalf of benp at reed.edu> wrote:
>
> >    Perhaps there's something else in the new SP metadata file that is
> causing the IDP to suppress the emailAddress
> > formatted nameid?
>
> Or perhaps there's an activationCondition attached to the generator of the
> email format limiting it to only the old SP, or the underlying attribute
> isn't released to the new SP and the generator isn't looking at unfiltered
> data.
>

Bingo! That was it. There was indeed an activationCondition, and then I
found the bean for that condition in global.xml. Once I added the new Adobe
SP to the list of candidates that condition the authentication test started
working properly (using the email based nameid as the username).

Thank you so much for your help!

Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201020/4f0d1a01/attachment.htm>