NameID Definition and Usage in Shib IDP 4

[prasanna cg]

Thanks Scott. I agree with your point. Unspecified in my example was just for illustration. The behavior is same regardless of the NameID format used. I am glad that I am doing it correct. And this is not an issue per se. But the question came out of curiosity to know if I am doing anything incorrect as I noticed this difference between v3 and v4. Thanks again for the response !



> On Jan 7, 2021, at 6:00 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> Adding....there is absolutely no circumstance in which you should ever use the unspecified NameID Format. You should refuse to do so in all cases, and there is virtually nothing that requires it.
> 
> When passing something in the NameID, the Format used should be set to whatever the attribute Name is, unless it's already a match for some other standard Format constant that would apply.
> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net