IDP 5.1.1 - adding SP metadata file to IDP without certificate

[Cantor, Scott]

> Thanks for replying, however if I do not add any certificate to
> the metadata  file it will not correctly redirect to the login
> page.

I'm simply stating that a certificate has nothing to do with this unless the IdP is just not told to allow for no encryption, which is logged.

> The below is an extract of the saml tracer that shows ADFS is
> sending  objectguid as nameid to policytech, how can I
> replicate this setup on IDP?

You shouldn't because that's a terrible idea, but NameID generation based on a resolved attribute is covered by the documentation.

-- Scott