Updated Adobe "IDP" (SP) config results in scrambled nameid

[Cantor, Scott]

On 10/20/20, 4:23 PM, "users on behalf of Ben Poliakoff" <users-bounces at shibboleth.net on behalf of benp at reed.edu> wrote:

>    Bingo! That was it. There was indeed an activationCondition,

So the answer is: stop. If you're using attributes to populate it anyway, just release the attribute in the normal way and stop worrying about limiting the format by SP.

The only reason to bother with activation conditions in NameID generation is to limit use of formats you probably don't want being used widely (persistent), or supporting broken SPs misusing formats.

Something using emailAddress carrying...email address, and being given...email address. That's not misuse, it's just normal. Release the attribute and be done.

-- Scott