Updated Adobe "IDP" (SP) config results in scrambled nameid

[Ben Poliakoff]

On Tue, Oct 20, 2020 at 1:33 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/20/20, 4:23 PM, "users on behalf of Ben Poliakoff" <
> users-bounces at shibboleth.net on behalf of benp at reed.edu> wrote:
>
> >    Bingo! That was it. There was indeed an activationCondition,
>
> So the answer is: stop. If you're using attributes to populate it anyway,
> just release the attribute in the normal way and stop worrying about
> limiting the format by SP.
>
> The only reason to bother with activation conditions in NameID generation
> is to limit use of formats you probably don't want being used widely
> (persistent), or supporting broken SPs misusing formats.
>
> Something using emailAddress carrying...email address, and being
> given...email address. That's not misuse, it's just normal. Release the
> attribute and be done.
>

Thank you, yes, removing this activation condition seems like a sound move.
No need to make the config needlessly baroque.

Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201020/5db594a5/attachment.htm>