Ignoring NameIDFormat metadata that includes the 'unspecified' format

[Cantor, Scott]

If the SP is asking you to provide an email address, then that's what I would provide it (with the proper Format).

Your problem is that you have to tell the IdP what to send the SP. Controlling NameID Format usage is based on the NameIDFormat element in metadata, or the nameIDFormatPrecedence property in a profile configuration override.

The documentation covers this and describes how Format selection works.

You should not just "make it work" by sending them unspecified, but if you insist on doing that, you will have to put that into a profile configuration override, as that is ignored when it's found in metadata.

Covered by [1] under "Dealing with "Unspecified".

-- Scott

[1] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration