Persistent ID instead of Transient Name ID

[Cantor, Scott]

> Regarding the SP metadata, you MAY have to delete the "unspecified" line. My
> IdP tends to resolve to whatever it wants when "unspecified" is in the SP
> metadata.

That would only happen if you explicitly configured support for it in your IdP, otherwise we ignore it (and we definitely ignore it when an SP requests it explicitly).

This is one of those "don't support this, ever" things that I tell people and they frequently just aren't willing to push back or understand that when vendors say they want that, they don't mean it (and don't care if you use it or not).

I can think of maybe 1-2 non-Shib SP cases I've ever seen where an SP even checks or notices the Format of a NameID, just one of thoese completely broken things that became common because people are lazy (and lazy -> broken when you support security specs).

-- Scott