IDP 5.1.1 - adding SP metadata file to IDP without certificate

[Saadallah Itani]

Hello Scott,

Thanks for replying, however if I do not add any certificate to the metadata 
file it will not correctly redirect to the login page.
The current setup on ADFS - has a transformation rule to map the ObjectGUID to 
nameid (outgoing claim type) and unspecified as outgoing nameid format.

The below is an extract of the saml tracer that shows ADFS is sending 
objectguid as nameid to policytech, how can I replicate this setup on IDP?

I did an ADFS Saml tracer with google browser beside the ObjectGUID attribute, 
something else is being sent with the same value of the ObjectGUID.



    <Subject>
            <NameID 
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">XXXXXX<NameID>
            <SubjectConfirmation 
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <SubjectConfirmationData 
InResponseTo="_dccefafb-958c-48b0-a34c-7bbcf55f16dd"
                                         NotOnOrAfter="2024-06-25T12:29:58.998Z"
                                         Recipient="https://url.policytech.eu/dotnet/noauth/login.aspx"
                                         />
            </SubjectConfirmation>
        </Subject>

        <AttributeStatement>
            <Attribute 
Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/objectGUID">
                <AttributeValue>XXXXXX<AttributeValue>
            </Attribute>
        </AttributeStatement

Thanks

Regards,
Saad
ext 2229

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Tuesday, June 25, 2024 3:18 PM
To: Shib Users <users at shibboleth.net>
Cc: Saadallah Itani <sitani at aub.edu.lb>
Subject: Re: IDP 5.1.1 - adding SP metadata file to IDP without certificate

A lack of certificate does not prevent it from working, it simply means no XML 
encryption is possible. There's nothing all that rare or unusual about it.

-- Scott


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7274 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240625/f43472a7/attachment.p7s>