custom NameQualifier for IDP in persistent nameID

[Kapetanakis Giannis]

On 17/02/2022 23:39, Cantor, Scott wrote:
> And quite likely it won't help you. The problem is in fact that the NameQualifier would be changing (it has to, you don’t get to leave it the same for policy/spec reasons if you change the entityID), so the overall value seen by an SP is going to be different even if the computed part of the value were the same.
>
> -- Scott


This is what I also thought. Even if I create the correct object to be returned in the SAML, the SP might freak out seeing it coming from a different entityID.

The computed part is the most easy, it could be a scripted attribute appropriately formated.

Thanks,

Giannis