<br><div>I am getting an error from my shibb instance when I try to log into a vendor&#39;s SP and I am hoping someone can offer advise. I am using shibb 2.1..5 and I am trying to authenticate with <a href="http://one45.com">one45.com</a>. </div>
<div><br></div><div>When I send the assertion I can see an error message in the assertion. Here is the snip:</div><div><br></div><div>&lt;saml2p:StatusCode Value=&quot;urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy&quot;/&gt;</div>
<div>       &lt;/saml2p:StatusCode&gt;&lt;saml2p:StatusMessage&gt;NameID Format not supported: urn:oasis:names:tc:SAML:2.0:nameid-format:transient</div><div>&lt;/saml2p:StatusMessage&gt;</div><div><br></div><div>The vendor&#39;s test login page shows error messages:</div>
<div><br></div><div>







<p class="p1">SimpleSAML_Error_Error: UNHANDLEDEXCEPTION</p>
<p class="p2">Backtrace:</p>
<p class="p2">0 /var/www/simplesamlphp/www/module.php:180 (N/A)</p><p class="p2">Caused by: sspmod_saml_Error: Responder/InvalidNameIDPolicy: NameID Format not supported: urn:oasis:names:tc:SAML:2.0:nameid-format:transient</p>

<p class="p2">Backtrace:</p>
<p class="p2">3 /var/www/simplesamlphp/modules/saml/lib/Message.php:368 (sspmod_saml_Message::getResponseError)</p>
<p class="p2">2 /var/www/simplesamlphp/modules/saml/lib/Message.php:489 (sspmod_saml_Message::processResponse)</p>
<p class="p2">1 /var/www/simplesamlphp/modules/saml/www/sp/saml2-acs.php:50 (require)</p>
<p class="p2">0 /var/www/simplesamlphp/www/module.php:135 (N/A)</p><p class="p2"><br></p><p class="p2">It seems to be telling me I am sending the nameID in the wrong format.</p><p class="p2"><br></p><p class="p2">Here is my attribute resolver snip for the relevant attributes:</p>
<p class="p2"></p><p class="p2">   &lt;resolver:AttributeDefinition id=&quot;principal&quot; xsi:type=&quot;PrincipalName&quot; xmlns=&quot;urn:mace:shibboleth:2.0:resolver:ad&quot;</p><p class="p2">         sourceAttributeID=&quot;uid&quot; &gt;</p>
<p class="p2">         &lt;resolver:Dependency ref=&quot;affLDAP&quot; /&gt;</p><p class="p2">              &lt;resolver:AttributeEncoder xsi:type=&quot;SAML2StringNameID&quot;</p><p class="p2">                 xmlns=&quot;urn:mace:shibboleth:2.0:attribute:encoder&quot;</p>
<p class="p2">                 nameFormat=&quot;urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified&quot; /&gt;</p><p class="p2">    &lt;/resolver:AttributeDefinition &gt;</p><p class="p2"><br></p><p class="p2">and</p><p class="p2">
<br></p><p class="p2"></p><p class="p2">  &lt;resolver:AttributeDefinition id=&quot;uid&quot; xsi:type=&quot;Simple&quot; xmlns=&quot;urn:mace:shibboleth:2.0:resolver:ad&quot;</p><p class="p2">        sourceAttributeID=&quot;uid&quot; &gt;</p>
<p class="p2">       &lt;resolver:Dependency ref=&quot;affLDAP&quot; /&gt;</p><p class="p2">        &lt;resolver:AttributeEncoder xsi:type=&quot;SAML1String&quot; xmlns=&quot;urn:mace:shibboleth:2.0:attribute:encoder&quot;</p>
<p class="p2">            name=&quot;urn:mace:dir:attribute-def:uid&quot; /&gt;</p><p class="p2">        &lt;resolver:AttributeEncoder xsi:type=&quot;SAML2String&quot; xmlns=&quot;urn:mace:shibboleth:2.0:attribute:encoder&quot;</p>
<p class="p2">            name=&quot;urn:oid:0.9.2342.19200300.100.1.1&quot; friendlyName=&quot;uid&quot; /&gt;</p><p class="p2">    &lt;/resolver:AttributeDefinition&gt;</p><p class="p2"><br></p><p class="p2">Now, here is my attribute filter statement for <a href="http://one45.com">one45.com</a>:</p>
<p class="p2">    &lt;AttributeFilterPolicy id=&quot;one45Policy&quot;&gt;</p><p class="p2"></p><p class="p2">        &lt;PolicyRequirementRule xsi:type=&quot;basic:AttributeRequesterString&quot; value=&quot;<a href="https://georgetown.one45.com">https://georgetown.one45.com</a>&quot; /&gt;</p>
<p class="p2">    &lt;AttributeRule attributeID=&quot;principal&quot;&gt;</p><p class="p2">        &lt;PermitValueRule xsi:type=&quot;basic:ANY&quot; /&gt;</p><p class="p2">    &lt;/AttributeRule&gt;</p><p class="p2">        &lt;AttributeRule attributeID=&quot;uid&quot;&gt;</p>
<p class="p2">            &lt;PermitValueRule xsi:type=&quot;basic:ANY&quot; /&gt;</p><p class="p2">        &lt;/AttributeRule&gt;</p><p class="p2">    &lt;/AttributeFilterPolicy&gt;</p><div><br></div><div>Does anyone have a notion what I am doing wrong?</div>
<div><br></div><div>Thanks,</div><div><br></div><div>Dave</div><p></p><div><br></div><p></p><div><br></div><p></p><p class="p2"><br></p></div>