[EXTERNAL] Re: Notice from Adobe about IdP SHA-1 certificates

[Mark McCoy]

We are passing the same thing, except our is some strange munged version of our identifier that we had to put in so that Okta/Adobe could use an identifier other than email. It was a "does not compute" moment when we told them that email is not a permanent identifier for us (and most likely all other education tenants).

We have a ticket in with their support because while the IdP tests fine, the NameID is this long userid at some-really-long-okta-guid-looking-this.com format that we suspect will break Adobe if we pass it along.


Mark McCoy

Manager, Enterprise Collaboration Services


The University of Texas at San Antonio

University Technology Solutions

One UTSA Circle

San Antonio, TX 78249-3209

210.458.5871

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, September 3, 2020 11:51
To: Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] Re: Notice from Adobe about IdP SHA-1 certificates

  **EXTERNAL EMAIL**
  This email originated outside of The University of Texas at San Antonio.
  Please exercise caution when clicking on links or opening attachments.



On 9/3/20, 12:47 PM, "Donald Lohr" <lohrda at jmu.edu> wrote:

>    What are others passing?

A NameID containing one of our internal identifiers via a custom NameID Format, which is the critical part matching our directory sync to their system, and standard versions of givenName, sn, and mail that I suspect are unused.

-- Scott


--
For Consortium Member technical support, see https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cmark.mccoy%40utsa.edu%7C716ff27978d143667b9508d85029b895%7C3a228dfbc64744cb88357b20617fc906%7C0%7C0%7C637347487415217290&sdata=pOTXIEJ%2FCI0KviG6RvP1ymoLduKAEgVh86YYhwD0HOU%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200914/caa3ff5f/attachment.htm>