getting desired value into nameID

Mak, Steven makst at
Thu Oct 6 23:58:52 UTC 2022

For an easy test, remove the other NameIDPolicies in the SP metadata so only emailAddress is remaining.

Then just make sure the logic of your resolver config allows the release of some attribute that can fulfill that policy to that service.

- Steve

From: IAM David Bantz <dabantz at>
Date: Thursday, October 6, 2022 at 7:55 PM
To: Mak, Steven <makst at>
Cc: Shib Users <users at>
Subject: Re: getting desired value into nameID
I’m debugging the config against the resolver exerciser and unsolicited request, so no normal incoming SAML request.


On 06Oct2022 at 15:42:58, "Mak, Steven" <makst at<mailto:makst at>> wrote:
Double check the SAML request that is coming in. If it is stating something like NameIDPolicy > unspecified + Exact, then that may be why you are having trouble.

- Steve Mak

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list