ECP: 401 error or application/vnd.paos+xml not supported?

[Peter Schober]

* Käfer Thomas via users <users at shibboleth.net> [2022-03-29 16:35]:
> How can I make my IDP 4.1.5 server always use the persistent nameID
> no matter if requested or not?

Whether that format is "requested or not" is the simple case: By
either changing the SP's metadata or by setting the preferred NameID
format in the IDP's relying-party.xml.

What's not simple (prohibited by the spec, IIRC, and not possible with
IDP configuration) is the SP requesting one format and the IDP
replying with a different one.

-peter